<div dir="ltr"><div>Hi,</div><div><br></div><div>Thank you for your answer. For rd.dev I get:</div><div> </ds:Signature><br> <saml2:Subject><br> <saml2:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer"><br> <saml2:SubjectConfirmationData Address="46.243.26.58" InResponseTo="_0b651836-f552-430c-90e4-e84e55d4eaa7" NotOnOrAfter="2014-10-15T11:54:38.962Z" Recipient="<a href="https://rp.dev/Auth/AssertionConsumerService">https://rp.dev/Auth/AssertionConsumerService</a>"/><br> </saml2:SubjectConfirmation><br> </saml2:Subject></div><div><br></div><div>I expect:</div><div><br></div><div> <saml:Subject><br><strong> <saml:NameID Format="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified">MyId</saml:NameID></strong><br> <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer"><br> <saml:SubjectConfirmationData Recipient="<a href="https://rp.dev/Auth/AssertionConsumerService">https://rp.dev/Auth/AssertionConsumerService</a>" NotOnOrAfter="2014-10-15T09:59:04.791Z" InResponseTo="_fd7d6fef-06a9-48d0-bce1-edd76657a328" /><br> </saml:SubjectConfirmation><br> </saml:Subject></div><div><br></div><div>Maybe my metadata is not correct to instruct the Testshib IDP.</div><div><br></div><div>In .NET is a class named <font color="#0000ff" face="Consolas"><font color="#0000ff" face="Consolas"><font color="#0000ff" face="Consolas">public</font></font></font><font face="Consolas"><font face="Consolas"> </font></font><font color="#0000ff" face="Consolas"><font color="#0000ff" face="Consolas"><font color="#0000ff" face="Consolas">class</font></font></font><font face="Consolas"><font face="Consolas"> </font></font><font color="#2b91af" face="Consolas"><font color="#2b91af" face="Consolas"><font color="#2b91af" face="Consolas">Saml2SecurityToken</font></font></font><font face="Consolas"><font face="Consolas"> : </font></font><font color="#2b91af" face="Consolas"><font color="#2b91af" face="Consolas"><font color="#2b91af" face="Consolas">SecurityToken <font color="#222222" face="Arial">that does all the 'work'. So if the right information is input, the output will also be given. However, the input is missing het NameId.</font></font></font></font></div><div><br></div><div>You help is appreciated.</div><div> <br></div><div>J.</div><div><br></div></div><div class="gmail_extra"><br><div class="gmail_quote">2014-10-15 11:19 GMT+02:00 Peter Schober <span dir="ltr"><<a href="mailto:peter.schober@univie.ac.at" target="_blank">peter.schober@univie.ac.at</a>></span>:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">* W O <<a href="mailto:39a0d912abc@gmail.com">39a0d912abc@gmail.com</a>> [2014-10-15 10:57]:<br>
<span>> How can I get the Saml2SecurityToken.Assertion.Subject.NameId in the<br>
> Subject form the <a href="http://testshib.org" target="_blank">testshib.org</a> test server? I get exceptions thrown if code<br>
> below is not uncommented.<br>
<br>
</span>Logging into the Testshib SP from the Testshib IDP (using the<br>
credentials provided on its login page) and checking the IDP and SP<br>
logs, I just verified that the Testshib IDP does send a transient<br>
NameID in the assertion's Subject.<br>
(It also sends a persistent NameID wrapped in a SAML attribute as part<br>
of the AttributeStatement.)<br>
Feel free to check the Testhib IDP' logs yourself, that's why they're<br>
being made easily available via the web.<br>
<br>
How you access a NameID in custom .NET code (I'm guessing) is not an<br>
issue for the Shibboleth list or project.<br>
<span class="HOEnZb"><font color="#888888">-peter<br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
</font></span></blockquote></div><br></div>