<html><head><meta http-equiv="Content-Type" content="text/html charset=windows-1252"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">Elementary question: <div><span class="Apple-tab-span" style="white-space:pre"> </span>where, in the IdP’s SAML assertion, is the transientId <<a href="https://wiki.shibboleth.net/confluence/display/SHIB2/IdPTransientNameIdentifier">https://wiki.shibboleth.net/confluence/display/SHIB2/IdPTransientNameIdentifier</a>> ("released to anyone” as recommended)?</div><div><div><br></div><div><span class="Apple-tab-span" style="white-space:pre"> </span>Is it the ID in the assertion... NameID in the Subject portion ? </div><div><br></div><div>from process log:</div><div><br></div><div><div style="margin: 0px; font-family: Monaco; background-color: rgb(255, 250, 194); position: static; z-index: auto;"><span style="font-size: 10px;">11:40:34.099</span> - DEBUG [edu.internet2.middleware.shibboleth.idp.profile.AbstractSAMLProfileHandler:585] </div><div style="margin: 0px; font-family: Monaco; background-color: rgb(255, 250, 194); position: static; z-index: auto;">- Retaining attribute transientId which may be encoded as a name identifier of format urn:mace:shibboleth:1.0:nameIdentifier</div><div style="margin: 0px; font-family: Monaco; background-color: rgb(255, 250, 194); position: static; z-index: auto; font-size: 11px;"><span style="font-size: 10px;">11:40:34.100</span> - DEBUG [edu.internet2.middleware.shibboleth.idp.profile.AbstractSAMLProfileHandler:585] </div><div style="margin: 0px; font-family: Monaco; background-color: rgb(255, 250, 194); position: static; z-index: auto; font-size: 11px;">- Retaining attribute oktanameid which may be encoded as a name identifier of format urn:oasis:names:tc:SAML:2.0:nameid-format:transient</div><div style="margin: 0px; font-family: Monaco; background-color: rgb(255, 250, 194); font-size: 11px; position: static; z-index: auto;"><span style="font-size: 10px;">11:40:34.100</span> - DEBUG [edu.internet2.middleware.shibboleth.idp.profile.AbstractSAMLProfileHandler:690] </div><div style="margin: 0px; font-family: Monaco; background-color: rgb(255, 250, 194); font-size: 11px; position: static; z-index: auto;">- Selecting attribute to be encoded as a name identifier by encoder of type edu.internet2.middleware.shibboleth.common.attribute.encoding.SAML2NameIDEncoder</div><div style="margin: 0px; font-family: Monaco; background-color: rgb(255, 250, 194); font-size: 11px;"><span style="font-size: 10px;">11:40:34.100</span> - DEBUG [edu.internet2.middleware.shibboleth.idp.profile.AbstractSAMLProfileHandler:717] </div><div style="margin: 0px; font-family: Monaco; background-color: rgb(255, 250, 194); font-size: 11px;">- Selecting the first attribute that can be encoded in to a name identifier</div><div style="margin: 0px; font-family: Monaco; background-color: rgb(255, 250, 194); font-size: 11px; position: static; z-index: auto;"><span style="font-size: 10px;">11:40:34.100</span> - DEBUG [edu.internet2.middleware.shibboleth.idp.profile.AbstractSAMLProfileHandler:501] </div><div style="margin: 0px; font-family: Monaco; background-color: rgb(255, 250, 194); font-size: 11px; position: static; z-index: auto;">- Name identifier for relying party 'https://••••' will be built from attribute 'transientId'</div><div style="margin: 0px; font-family: Monaco; background-color: rgb(255, 250, 194); font-size: 11px; position: static; z-index: auto;"><span style="font-size: 10px;">11:40:34.101</span> - DEBUG [edu.internet2.middleware.shibboleth.idp.profile.saml2.AbstractSAML2ProfileHandler:868] </div><div style="margin: 0px; font-family: Monaco; background-color: rgb(255, 250, 194); font-size: 11px; position: static; z-index: auto;">- Using attribute 'transientId' supporting NameID format 'urn:oasis:names:tc:SAML:2.0:nameid-format:transient' to create the NameID for relying party 'https://••••••'</div></div><div><br></div></div><div>SAML assertion fragments:</div><div style="font-size: 11px;"><br></div><div style="font-size: 11px;"><div style="margin: 0px; font-family: Monaco; background-color: rgb(255, 250, 194); position: static; z-index: auto;"><?xml version="1.0" encoding="UTF-8"?><saml2p:Response xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol" Destination="https://••••" ID="_5a83f3c5e2d3e9f6eb30a6fbcc98f1cc" IssueInstant="2014-09-22T21:39:45.977Z" Version="2.0”>…</div></div><div style="margin: 0px; font-family: Monaco; background-color: rgb(255, 250, 194); position: relative; z-index: 0; font-size: 11px;"><br></div><div style="margin: 0px; font-family: Monaco; background-color: rgb(255, 250, 194); position: relative; z-index: 0;"><div style="margin: 0px; font-size: 11px;"> <saml2:Assertion xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion" ID="_ade790abe4f75d0b979b039ce18912ea" IssueInstant="2014-09-22T21:39:45.977Z" Version="2.0" xmlns:xs="<a href="http://www.w3.org/2001/XMLSchema”">http://www.w3.org/2001/XMLSchema”</a>>...</div><div style="margin: 0px; font-size: 11px;"><br></div><div style="margin: 0px;"><div style="margin: 0px; font-size: 11px;"><saml2:Subject></div><div style="margin: 0px; font-size: 11px;"> <saml2:NameID Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient" NameQualifier="urn:mace:incommon:alaska.edu" SPNameQualifier="urn:amazon:webservices">_59ddcabea831dd654d8a75364ac70492</saml2:NameID>...</div></div></div></body></html>