<div><span style="text-align:-webkit-left;background-color:rgb(255,255,255)"><font color="#0000ff" face="arial, sans-serif"><div>Hello,</div><div><br></div><div>I have what I hope is a quick question regarding SP configuration and the NameID format settings. Our partner has indicated that they will be sending a NameID with a format of transient. Sounds good to us. Recently, they have come back and said that the metadata we have provided them indicates that we don't support the transient NameID format. They believe that we need to configure our system to not include the following tags in the metadata.</div>
</font></span></div><span style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:13px;text-align:-webkit-left;background-color:rgb(255,255,255)"><font color="#0000ff"><div><span style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:13px;text-align:-webkit-left;background-color:rgb(255,255,255)"><font color="#0000ff"><br>
</font></span></div><</font></span><span style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:13px;text-align:-webkit-left;background-color:rgb(255,255,255)"><font color="#990000">md:ManageNameIDService</font></span><span style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:13px;text-align:-webkit-left;background-color:rgb(255,255,255)"> </span><span style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:13px;text-align:-webkit-left;background-color:rgb(255,255,255)"><font color="#990000">Binding</font></span><span style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:13px;text-align:-webkit-left;background-color:rgb(255,255,255)"><font color="#0000ff">="</font></span><b style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:13px;text-align:-webkit-left;background-color:rgb(255,255,255)">urn:oasis:names:tc:SAML:2.0:bindings:SOAP</b><span style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:13px;text-align:-webkit-left;background-color:rgb(255,255,255)"><font color="#0000ff">"</font></span><span style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:13px;text-align:-webkit-left;background-color:rgb(255,255,255)"><font color="#990000">Location</font></span><span style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:13px;text-align:-webkit-left;background-color:rgb(255,255,255)"><font color="#0000ff">="</font></span><b style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:13px;text-align:-webkit-left;background-color:rgb(255,255,255)"><a href="https://www.dev.careverge.com/Shibboleth.sso/NIM/SOAP" target="_blank" style="color:rgb(17,85,204)">https://www.dev.careverge.com/Shibboleth.sso/NIM/SOAP</a></b><font color="#0000ff" style="font-family:arial,sans-serif;font-size:13px;text-align:-webkit-left;background-color:rgb(255,255,255)">" /></font><span style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:13px;text-align:-webkit-left;background-color:rgb(255,255,255)"></span><div style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:13px;text-align:-webkit-left;background-color:rgb(255,255,255)">
<div style="margin-left:1em"><strong><font color="#ff0000" face="Courier New"> </font></strong> <font color="#0000ff"><</font><font color="#990000">md:ManageNameIDService</font> <font color="#990000">Binding</font><font color="#0000ff">="</font><b>urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect</b><font color="#0000ff">"</font><font color="#990000"> Location</font><font color="#0000ff">="</font><b><a href="https://www.dev.careverge.com/Shibboleth.sso/NIM/Redirect" target="_blank" style="color:rgb(17,85,204)">https://www.dev.careverge.com/Shibboleth.sso/NIM/Redirect</a></b><font color="#0000ff">" /></font></div>
</div><div style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:13px;text-align:-webkit-left;background-color:rgb(255,255,255)"><div style="margin-left:1em"><strong><font color="#ff0000" face="Courier New"> </font></strong> <font color="#0000ff"><</font><font color="#990000">md:ManageNameIDService</font> <font color="#990000">Binding</font><font color="#0000ff">="</font><b>urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST</b><font color="#0000ff">"</font><font color="#990000"> Location</font><font color="#0000ff">="</font><b><a href="https://www.dev.careverge.com/Shibboleth.sso/NIM/POST" target="_blank" style="color:rgb(17,85,204)">https://www.dev.careverge.com/Shibboleth.sso/NIM/POST</a></b><font color="#0000ff">" /></font></div>
</div><div style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:13px;text-align:-webkit-left;background-color:rgb(255,255,255)"><div style="margin-left:1em"><strong><font color="#ff0000" face="Courier New"> </font></strong> <font color="#0000ff"><</font><font color="#990000">md:ManageNameIDService</font> <font color="#990000">Binding</font><font color="#0000ff">="</font><b>urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact</b><font color="#0000ff">"</font><font color="#990000"> Location</font><font color="#0000ff">="</font><b><a href="https://www.dev.careverge.com/Shibboleth.sso/NIM/Artifact" target="_blank" style="color:rgb(17,85,204)">https://www.dev.careverge.com/Shibboleth.sso/NIM/Artifact</a></b><font color="#0000ff">" /></font></div>
<div><font color="#0000ff"><br></font></div><div><font color="#0000ff">I have looked through the documentation and I can't really find too much documentation around configuring an SP to support transient NameID format. One thing I have seen is our REMOTE_USER attribute (on ApplicationDefualts) contains 'eppn persistent-id target-id' as its value. We also have the following configured as part of our sessions:</font></div>
<div><font color="#0000ff"><br></font></div><div><md:ManageNameIDService Location="/NIM/SOAP"</div><div> Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP"/></div><div> <md:ManageNameIDService Location="/NIM/Redirect" conf:template="bindingTemplate.html"</div>
<div> Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect"/></div><div> <md:ManageNameIDService Location="/NIM/POST" conf:template="bindingTemplate.html"</div>
<div> Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"/></div><div> <md:ManageNameIDService Location="/NIM/Artifact" conf:template="bindingTemplate.html"</div>
<div> Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact"/></div><div><font color="#0000ff"><br></font></div><div><font color="#0000ff">Is Shibboleth SP configured to use persistent nameId's out of the box by default, and if so do any of these configuration element govern that behavior?</font></div>
<div><font color="#0000ff"><br></font></div><div><font color="#0000ff">Thank you,</font></div><div><font color="#0000ff"><br></font></div><div><font color="#0000ff">Rob </font></div></div>