<html>
  <head>
    <meta content="text/html; charset=ISO-8859-1"
      http-equiv="Content-Type">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    <div class="moz-cite-prefix">Le 17/10/2013 23:08, Cantor, Scott a
      &eacute;crit&nbsp;:<br>
    </div>
    <blockquote
cite="mid:BA63CEAE152A7742B854C678D9491383BF9549B3@CIO-KRC-D1MBX03.osuad.osu.edu"
      type="cite">
      <pre wrap="">On 10/17/13 4:41 PM, "Jehan Procaccia" <a class="moz-txt-link-rfc2396E" href="mailto:Jehan.Procaccia@it-sudparis.eu">&lt;Jehan.Procaccia@it-sudparis.eu&gt;</a>
wrote:
</pre>
      <blockquote type="cite">
        <pre wrap="">
oops, that was a silly cut&amp;paste from the wiki sample/template
would it be more accurate to set precedence for that new custom NameID
based on that definition ?
</pre>
      </blockquote>
      <pre wrap="">
I don't understand your question, but you are misusing transient now, and
that's also wrong.

What format does the service require? That's what you have to use.

-- Scott


--
To unsubscribe from this list send an email to <a class="moz-txt-link-abbreviated" href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a>
</pre>
    </blockquote>
    the vendor told me that they are waiting for this kind of format <span
      style="color:#1F497D" lang="EN-US"><span
        style="background:yellow;mso-highlight:yellow">urn:oasis:names:tc:SAML:1.1:nameid-format:
        Unspecified "<br>
      </span></span><br>
    based on the saml reponse example message they gave me (sample
    message that they are waiting for ):<br>
    <br>
    <span style="color:#1F497D"></span><span style="color:#1F497D"
      lang="EN-US">&lt;saml:AuthenticationStatement
      AuthenticationMethod="urn:oasis:names:tc:SAML:1.0:am:password"
      AuthenticationInstant="2013-10-09T08:55:00Z"&gt;</span><span
      lang="EN-US"><o:p></o:p></span><span style="color:#1F497D"
      lang="EN-US">&nbsp;&nbsp; <br>
      &nbsp;&lt;saml:Subject&gt;</span><span lang="EN-US"><o:p></o:p></span><span
      style="color:#1F497D" lang="EN-US"> <span
        style="background:yellow;mso-highlight:yellow">&lt;saml:NameIdentifier
        Format="urn:oasis:names:tc:SAML:1.1:nameid-format: Unspecified
        "&gt;<b><a href="mailto:jehan.procaccia@tem-tsp.eu">jehan.procaccia@tam-tsp.eu</a></b>&lt;/saml:NameIdentifier&gt;</span></span><span
      lang="EN-US"><o:p></o:p></span><span style="color:#1F497D"
      lang="EN-US"><br>
      &lt;saml:SubjectConfirmation&gt;</span><span lang="EN-US"><o:p></o:p></span><span
      style="color:#1F497D" lang="EN-US">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
&lt;saml:ConfirmationMethod&gt;urn:oasis:names:tc:SAML:1.0:cm:bearer&lt;/saml:ConfirmationMethod&gt;</span><span
      lang="EN-US"><o:p></o:p></span><span style="color:#1F497D"
      lang="EN-US"><br>
    </span><span style="color:#1F497D">&lt;/saml:SubjectConfirmation&gt;</span><o:p></o:p><span
      style="color:#1F497D"><br>
      &lt;/saml:Subject&gt;</span><o:p></o:p><span style="color:#1F497D">&lt;/saml:AuthenticationStatement&gt;</span><br>
    <br>
    but it is still not clear to me what is the AttributeName, I'am
    waiting for a reponse from the vendor regarding that AttributeName
    ...<br>
    <br>
    For now with my actual configuration I am sending :<br>
    <br>
    &lt;saml1:AttributeStatement&gt;&lt;saml1:Subject&gt;&lt;saml1:<b>NameIdentifier</b>
    Format="urn:mace:shibboleth:1.0:nameIdentifier" NameQualifier=<a
      class="moz-txt-link-rfc2396E"
      href="https://shibidp1.it-sudparis.eu/idp/shibboleth">"https://idp.int-evry.fr/idp/shibboleth"</a>&gt;_11ac849b399ca1d47c52e3210dab23ee&lt;/saml1:NameIdentifier&gt;&lt;saml1:SubjectConfirmation&gt;&lt;saml1:ConfirmationMethod&gt;urn:oasis:names:tc:SAML:1.0:cm:bearer&lt;/saml1:ConfirmationMethod&gt;<br>
    ....<br>
    &lt;saml1:Attribute<b>
      AttributeName="urn:mace:dir:attribute-def:mail"</b>
    AttributeNamespace="urn:mace:shibboleth:1.0:attributeNamespace:uri"&gt;<br>
    &lt;saml1:AttributeValue xmlns:xsi=<a class="moz-txt-link-rfc2396E"
      href="http://www.w3.org/2001/XMLSchema-instance">"http://www.w3.org/2001/XMLSchema-instance"</a>
    xsi:type="xs:string"&gt;<b><a class="moz-txt-link-abbreviated"
        href="mailto:jehan.procaccia@tem-tsp.eu">jehan.procaccia@tam-tsp.eu</a></b>&lt;/saml1:AttributeValue&gt;&lt;/saml1:Attribute&gt;&lt;/saml1:AttributeStatement&gt;&lt;/saml1:Assertion&gt;&lt;/saml1p:Response&gt;<br>
    <br>
    I still want to send my email address as the NameIdentifier for that
    SP, not the default transientId, how can I force my shibboleth IDP
    to do so ?<br>
    thanks .<br>
  </body>
</html>