<html><head><meta http-equiv="Content-Type" content="text/html charset=windows-1252"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">If the vendor requires it as the subject of the SAML assertion (as suggested by <span style="font-family: Calibri, sans-serif; font-size: 10.5pt;"><saml:subject>...</span><font face="Calibri, sans-serif"><span style="font-size: 10.5pt;"> <saml:nameid>yqian</saml:nameid></span><span style="font-size: 14px;">…</span><span style="font-size: 10.5pt;">)</span></font>, <div>that’s different than an attribute in the attribute portion of the assertion.</div><div><br></div><div>David Bantz<br><div><br></div><div><br><div><div>On Thu, 20 Mar 2014, at 12:00 , Cameron Kerr <<a href="mailto:cameron.kerr@otago.ac.nz">cameron.kerr@otago.ac.nz</a>> wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><div lang="EN-NZ" link="#0563C1" vlink="#954F72" style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;"><div class="WordSection1" style="page: WordSection1;"><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;"><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);">You will need to allow it to go to the SP involved (ie. edit attribute-filter.xml)<o:p></o:p></span></div><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;"><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);"> </span></div><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;"><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);">Cheers,<o:p></o:p></span></div><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;"><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);">Cameron<o:p></o:p></span></div><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;"><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);"> </span></div><div><div style="border-style: solid none none; border-top-color: rgb(225, 225, 225); border-top-width: 1pt; padding: 3pt 0cm 0cm;"><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;"><b><span lang="EN-US" style="font-size: 11pt; font-family: Calibri, sans-serif;">From:</span></b><span lang="EN-US" style="font-size: 11pt; font-family: Calibri, sans-serif;"><span class="Apple-converted-space"> </span><a href="mailto:users-bounces@shibboleth.net">users-bounces@shibboleth.net</a> [<a href="mailto:users-bounces@shibboleth.net">mailto:users-bounces@shibboleth.net</a>]<span class="Apple-converted-space"> </span><b>On Behalf Of<span class="Apple-converted-space"> </span></b>Qian, Yi<br><b>Sent:</b><span class="Apple-converted-space"> </span>Friday, 21 March 2014 8:51 a.m.<br><b>To:</b><span class="Apple-converted-space"> </span>Shib Users<br><b>Subject:</b><span class="Apple-converted-space"> </span>how to release uid as nameid<o:p></o:p></span></div></div></div><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;"><o:p> </o:p></div><div><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;"><span style="font-size: 10.5pt; font-family: Calibri, sans-serif;">Hello, <o:p></o:p></span></div></div><div><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;"><span style="font-size: 10.5pt; font-family: Calibri, sans-serif;"> </span></div></div><div><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;"><span style="font-size: 10.5pt; font-family: Calibri, sans-serif;">The vendor request us to use uid as nameid, such as <o:p></o:p></span></div></div><div><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;"><span style="font-size: 10.5pt; font-family: Calibri, sans-serif;"><saml:subject><o:p></o:p></span></div></div><div><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;"><span style="font-size: 10.5pt; font-family: Calibri, sans-serif;"> <saml:nameid>yqian</saml:nameid><o:p></o:p></span></div></div><div><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;"><span style="font-size: 10.5pt; font-family: Calibri, sans-serif;"></saml:subject><o:p></o:p></span></div></div><div><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;"><span style="font-size: 10.5pt; font-family: Calibri, sans-serif;"> </span></div></div><div><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;"><span style="font-size: 10.5pt; font-family: Calibri, sans-serif;">And in their metadata, they listed nameid format as<o:p></o:p></span></div></div><div><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;"><span style="font-size: 8.5pt; font-family: Monaco, serif; color: rgb(0, 145, 147);"><</span><span style="font-size: 8.5pt; font-family: Monaco, serif; color: rgb(78, 145, 146);">md:NameIDFormat</span><span style="font-size: 8.5pt; font-family: Monaco, serif; color: rgb(0, 145, 147);">></span><span style="font-size: 8.5pt; font-family: Monaco, serif;">urn:oasis:names:tc:SAML:1.1:<u>nameid</u>-format:entity</span><span style="font-size: 8.5pt; font-family: Monaco, serif; color: rgb(0, 145, 147);"></</span><span style="font-size: 8.5pt; font-family: Monaco, serif; color: rgb(78, 145, 146);">md:NameIDFormat</span><span style="font-size: 8.5pt; font-family: Monaco, serif; color: rgb(0, 145, 147);">></span><span style="font-size: 8.5pt; font-family: Monaco, serif;"><o:p></o:p></span></div><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;"><span style="font-size: 8.5pt; font-family: Monaco, serif;"> </span></div></div><div><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;"><span style="font-size: 10.5pt; font-family: Calibri, sans-serif;">So I tried add following definition in resolver.xml<o:p></o:p></span></div></div><div><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;"><span style="font-size: 8.5pt; font-family: Monaco, serif; color: rgb(0, 145, 147);"><</span><span style="font-size: 8.5pt; font-family: Monaco, serif; color: rgb(78, 145, 146);">resolver:AttributeDefinition</span><span style="font-size: 8.5pt; font-family: Monaco, serif;"> </span><span style="font-size: 8.5pt; font-family: Monaco, serif; color: rgb(147, 33, 146);">xsi:type</span><span style="font-size: 8.5pt; font-family: Monaco, serif;">=</span><span style="font-size: 8.5pt; font-family: Monaco, serif; color: rgb(57, 51, 255);">"ad:Simple"</span><span style="font-size: 8.5pt; font-family: Monaco, serif;"> </span><span style="font-size: 8.5pt; font-family: Monaco, serif; color: rgb(147, 33, 146);">id</span><span style="font-size: 8.5pt; font-family: Monaco, serif;">=</span><span style="font-size: 8.5pt; font-family: Monaco, serif; color: rgb(57, 51, 255);">"releasedUId"</span><span style="font-size: 8.5pt; font-family: Monaco, serif;"> </span><span style="font-size: 8.5pt; font-family: Monaco, serif; color: rgb(147, 33, 146);">sourceAttributeID</span><span style="font-size: 8.5pt; font-family: Monaco, serif;">=</span><span style="font-size: 8.5pt; font-family: Monaco, serif; color: rgb(57, 51, 255);">"uid"</span><span style="font-size: 8.5pt; font-family: Monaco, serif; color: rgb(0, 145, 147);">></span><span style="font-size: 8.5pt; font-family: Monaco, serif; color: rgb(78, 145, 146);"><o:p></o:p></span></div><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;"><span style="font-size: 8.5pt; font-family: Monaco, serif;"> <span class="Apple-converted-space"> </span></span><span style="font-size: 8.5pt; font-family: Monaco, serif; color: rgb(0, 145, 147);"><</span><span style="font-size: 8.5pt; font-family: Monaco, serif; color: rgb(78, 145, 146);">resolver:Dependency</span><span style="font-size: 8.5pt; font-family: Monaco, serif;"> </span><span style="font-size: 8.5pt; font-family: Monaco, serif; color: rgb(147, 33, 146);">ref</span><span style="font-size: 8.5pt; font-family: Monaco, serif;">=</span><span style="font-size: 8.5pt; font-family: Monaco, serif; color: rgb(57, 51, 255);">"myLDAP"</span><span style="font-size: 8.5pt; font-family: Monaco, serif;"> </span><span style="font-size: 8.5pt; font-family: Monaco, serif; color: rgb(0, 145, 147);">/></span><span style="font-size: 8.5pt; font-family: Monaco, serif; color: rgb(78, 145, 146);"><o:p></o:p></span></div><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;"><span style="font-size: 8.5pt; font-family: Monaco, serif;"> <span class="Apple-converted-space"> </span></span><span style="font-size: 8.5pt; font-family: Monaco, serif; color: rgb(0, 145, 147);"><</span><span style="font-size: 8.5pt; font-family: Monaco, serif; color: rgb(78, 145, 146);">resolver:AttributeEncoder</span><span style="font-size: 8.5pt; font-family: Monaco, serif;"> </span><span style="font-size: 8.5pt; font-family: Monaco, serif; color: rgb(147, 33, 146);">xmlns</span><span style="font-size: 8.5pt; font-family: Monaco, serif;">=</span><span style="font-size: 8.5pt; font-family: Monaco, serif; color: rgb(57, 51, 255);">"urn:mace:shibboleth:2.0:attribute:encoder"</span><span style="font-size: 8.5pt; font-family: Monaco, serif;"> </span><span style="font-size: 8.5pt; font-family: Monaco, serif; color: rgb(147, 33, 146);">xsi:type</span><span style="font-size: 8.5pt; font-family: Monaco, serif;">=</span><span style="font-size: 8.5pt; font-family: Monaco, serif; color: rgb(57, 51, 255);">"SAML2StringNameID"</span><span style="font-size: 8.5pt; font-family: Monaco, serif;"></span><span style="font-size: 8.5pt; font-family: Monaco, serif; color: rgb(147, 33, 146);">nameFormat</span><span style="font-size: 8.5pt; font-family: Monaco, serif;">=</span><span style="font-size: 8.5pt; font-family: Monaco, serif; color: rgb(57, 51, 255);">"urn:oasis:names:tc:SAML:1.1:nameid-format:entity"</span><span style="font-size: 8.5pt; font-family: Monaco, serif;"> </span><span style="font-size: 8.5pt; font-family: Monaco, serif; color: rgb(0, 145, 147);">/></span><span style="font-size: 8.5pt; font-family: Monaco, serif; color: rgb(57, 51, 255);"><o:p></o:p></span></div><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;"><span style="font-size: 8.5pt; font-family: Monaco, serif;"> <span class="Apple-converted-space"> </span></span><span style="font-size: 8.5pt; font-family: Monaco, serif; color: rgb(0, 145, 147);"></</span><span style="font-size: 8.5pt; font-family: Monaco, serif; color: rgb(78, 145, 146);">resolver:AttributeDefinition</span><span style="font-size: 8.5pt; font-family: Monaco, serif; color: rgb(0, 145, 147);">></span><span style="font-size: 8.5pt; font-family: Monaco, serif; color: rgb(78, 145, 146);"><o:p></o:p></span></div><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;"><span style="font-size: 8.5pt; font-family: Monaco, serif; color: rgb(78, 145, 146);"> </span></div><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;"><span style="font-family: Calibri, sans-serif;">But, I did not see in the name id in assertion, even I did not see this nameid format be applied in the log</span><o:p></o:p></div><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;"><o:p> </o:p></div><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;"><span style="font-family: Calibri, sans-serif;">Thanks</span><o:p></o:p></div><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;"><span style="font-family: Calibri, sans-serif;">Yi</span><o:p></o:p></div></div></div>--<br>To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a></div></blockquote></div><br></div></div></body></html>