<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
Yes (the value is "_59dd...0492".)<br>
<br>
<div class="moz-cite-prefix">On 9/22/2014 5:02 PM, David Bantz
wrote:<br>
</div>
<blockquote
cite="mid:409FE9F6-94C4-4992-87E3-E62B37051058@Alaska.edu"
type="cite">
<meta http-equiv="Content-Type" content="text/html;
charset=ISO-8859-1">
Elementary question:
<div><span class="Apple-tab-span" style="white-space:pre"> </span>where,
in the IdP’s SAML assertion, is the transientId <<a
moz-do-not-send="true"
href="https://wiki.shibboleth.net/confluence/display/SHIB2/IdPTransientNameIdentifier">https://wiki.shibboleth.net/confluence/display/SHIB2/IdPTransientNameIdentifier</a>>
("released to anyone” as recommended)?</div>
<div>
<div><br>
</div>
<div><span class="Apple-tab-span" style="white-space:pre"> </span>Is
it the ID in the assertion... NameID in the Subject portion ?
</div>
<div><br>
</div>
<div>from process log:</div>
<div><br>
</div>
<div>
<div style="margin: 0px; font-family: Monaco;
background-color: rgb(255, 250, 194); position: static;
z-index: auto;"><span style="font-size: 10px;">11:40:34.099</span>
- DEBUG
[edu.internet2.middleware.shibboleth.idp.profile.AbstractSAMLProfileHandler:585] </div>
<div style="margin: 0px; font-family: Monaco;
background-color: rgb(255, 250, 194); position: static;
z-index: auto;">- Retaining attribute transientId which may
be encoded as a name identifier of format
urn:mace:shibboleth:1.0:nameIdentifier</div>
<div style="margin: 0px; font-family: Monaco;
background-color: rgb(255, 250, 194); position: static;
z-index: auto; font-size: 11px;"><span style="font-size:
10px;">11:40:34.100</span> - DEBUG
[edu.internet2.middleware.shibboleth.idp.profile.AbstractSAMLProfileHandler:585] </div>
<div style="margin: 0px; font-family: Monaco;
background-color: rgb(255, 250, 194); position: static;
z-index: auto; font-size: 11px;">- Retaining attribute
oktanameid which may be encoded as a name identifier of
format urn:oasis:names:tc:SAML:2.0:nameid-format:transient</div>
<div style="margin: 0px; font-family: Monaco;
background-color: rgb(255, 250, 194); font-size: 11px;
position: static; z-index: auto;"><span style="font-size:
10px;">11:40:34.100</span> - DEBUG
[edu.internet2.middleware.shibboleth.idp.profile.AbstractSAMLProfileHandler:690] </div>
<div style="margin: 0px; font-family: Monaco;
background-color: rgb(255, 250, 194); font-size: 11px;
position: static; z-index: auto;">- Selecting attribute to
be encoded as a name identifier by encoder of type
edu.internet2.middleware.shibboleth.common.attribute.encoding.SAML2NameIDEncoder</div>
<div style="margin: 0px; font-family: Monaco;
background-color: rgb(255, 250, 194); font-size: 11px;"><span
style="font-size: 10px;">11:40:34.100</span> - DEBUG
[edu.internet2.middleware.shibboleth.idp.profile.AbstractSAMLProfileHandler:717] </div>
<div style="margin: 0px; font-family: Monaco;
background-color: rgb(255, 250, 194); font-size: 11px;">-
Selecting the first attribute that can be encoded in to a
name identifier</div>
<div style="margin: 0px; font-family: Monaco;
background-color: rgb(255, 250, 194); font-size: 11px;
position: static; z-index: auto;"><span style="font-size:
10px;">11:40:34.100</span> - DEBUG
[edu.internet2.middleware.shibboleth.idp.profile.AbstractSAMLProfileHandler:501] </div>
<div style="margin: 0px; font-family: Monaco;
background-color: rgb(255, 250, 194); font-size: 11px;
position: static; z-index: auto;">- Name identifier for
relying party '<a class="moz-txt-link-freetext" href="https://••••">https://••••</a>' will be built from attribute
'transientId'</div>
<div style="margin: 0px; font-family: Monaco;
background-color: rgb(255, 250, 194); font-size: 11px;
position: static; z-index: auto;"><span style="font-size:
10px;">11:40:34.101</span> - DEBUG
[edu.internet2.middleware.shibboleth.idp.profile.saml2.AbstractSAML2ProfileHandler:868] </div>
<div style="margin: 0px; font-family: Monaco;
background-color: rgb(255, 250, 194); font-size: 11px;
position: static; z-index: auto;">- Using attribute
'transientId' supporting NameID format
'urn:oasis:names:tc:SAML:2.0:nameid-format:transient' to
create the NameID for relying party '<a class="moz-txt-link-freetext" href="https://••••••">https://••••••</a>'</div>
</div>
<div><br>
</div>
</div>
<div>SAML assertion fragments:</div>
<div style="font-size: 11px;"><br>
</div>
<div style="font-size: 11px;">
<div style="margin: 0px; font-family: Monaco; background-color:
rgb(255, 250, 194); position: static; z-index: auto;"><?xml
version="1.0" encoding="UTF-8"?><saml2p:Response
xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol"
Destination=<a class="moz-txt-link-rfc2396E" href="https://••••">"https://••••"</a>
ID="_5a83f3c5e2d3e9f6eb30a6fbcc98f1cc"
IssueInstant="2014-09-22T21:39:45.977Z" Version="2.0”>…</div>
</div>
<div style="margin: 0px; font-family: Monaco; background-color:
rgb(255, 250, 194); position: relative; z-index: 0; font-size:
11px;"><br>
</div>
<div style="margin: 0px; font-family: Monaco; background-color:
rgb(255, 250, 194); position: relative; z-index: 0;">
<div style="margin: 0px; font-size: 11px;"> <saml2:Assertion
xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion"
ID="_ade790abe4f75d0b979b039ce18912ea"
IssueInstant="2014-09-22T21:39:45.977Z" Version="2.0"
xmlns:xs="<a moz-do-not-send="true"
href="http://www.w3.org/2001/XMLSchema%3F">http://www.w3.org/2001/XMLSchema”</a>>...</div>
<div style="margin: 0px; font-size: 11px;"><br>
</div>
<div style="margin: 0px;">
<div style="margin: 0px; font-size: 11px;"><saml2:Subject></div>
<div style="margin: 0px; font-size: 11px;">
<saml2:NameID
Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient"
NameQualifier="urn:mace:incommon:alaska.edu"
SPNameQualifier="urn:amazon:webservices">_59ddcabea831dd654d8a75364ac70492</saml2:NameID>...</div>
</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
</blockquote>
<br>
<pre class="moz-signature" cols="72">--
%% Christopher A. Bongaarts %% <a class="moz-txt-link-abbreviated" href="mailto:cab@umn.edu">cab@umn.edu</a> %%
%% OIT - Identity Management %% <a class="moz-txt-link-freetext" href="http://umn.edu/~cab">http://umn.edu/~cab</a> %%
%% University of Minnesota %% +1 (612) 625-1809 %%
</pre>
</body>
</html>