<div dir="ltr">I haven't tested it with google apps but yes have generated a response with unspecified. in attribute resolver I created an attribute :<div><br></div><div>
<p class=""><span class=""><</span><span class="">resolver</span><span class="">:</span><span class="">AttributeDefinition </span><span class="">id</span><span class="">=</span><span class="">"uidname"</span><span class=""> </span><span class="">xsi</span><span class="">:</span><span class="">type</span><span class="">=</span><span class="">"ad:Simple"</span><span class=""> </span><span class="">sourceAttributeID</span><span class="">=</span><span class="">"uid"</span><span class="">></span></p>
<p class=""><span class=""> </span><span class=""><</span><span class="">resolver</span><span class="">:</span><span class="">Dependency </span><span class="">ref</span><span class="">=</span><span class="">"myLDAP"</span><span class=""> /></span></p>
<p class=""><span class=""> </span><span class=""><</span><span class="">resolver</span><span class="">:</span><span class="">AttributeEncoder </span><span class="">xmlns</span><span class="">=</span><span class="">"urn:mace:shibboleth:2.0:attribute:encoder"</span><span class=""> </span><span class="">xsi</span><span class="">:</span><span class="">type</span><span class="">=</span><span class="">"SAML2StringNameID"</span><span class=""> </span><span class="">nameFormat</span><span class="">=</span><span class="">"urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified"</span><span class=""> /></span></p>
<p class=""><span class=""> </span><span class=""></</span><span class="">resolver</span><span class="">:</span><span class="">AttributeDefinition></span></p><p class=""><span class="">then in attribute-filter.xml I added:</span></p><p class=""><span class=""><br></span></p><p class=""><span class=""><</span><span class="">afp</span><span class="">:</span><span class="">AttributeRule </span><span class="">attributeID</span><span class="">=</span><span class="">"uidname"</span><span class="">></span></p><p class=""><span class=""> </span><span class=""><</span><span class="">afp</span><span class="">:</span><span class="">PermitValueRule </span><span class="">xsi</span><span class="">:</span><span class="">type</span><span class="">=</span><span class="">"basic:ANY"</span><span class=""> /></span></p><p class=""><span class="">
</span></p><p class=""><span class=""> </span><span class=""></</span><span class="">afp</span><span class="">:</span><span class="">AttributeRule></span></p><p class=""><span class="">Finally in saml-nameid.properties i set the default to unspecified:</span></p><p class=""><span class="">
</span></p><p class=""><span class="">idp.</span><span class="">nameid</span><span class="">.saml2.default</span><span class=""> = </span><span class="">urn:oasis:names:tc:SAML:1.1:</span><span class="">nameid</span><span class="">-format:unspecified</span></p><p class="">I think those were all the steps I took.</p><p class="">Thanks</p><p class="">Marc</p></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Thu, Mar 19, 2015 at 11:27 AM, Glenn Wearen <span dir="ltr"><<a href="mailto:glenn.wearen@heanet.ie" target="_blank">glenn.wearen@heanet.ie</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div style="word-wrap:break-word">Has anybody managed to generate a response accepted by Google Apps with a new IdPv3 install, i.e. a response containing unspecified nameid format?<div><div>Regards</div><div>Glenn</div><div><br><div><div><span style="border-collapse:separate;color:rgb(0,0,0);font-family:Helvetica;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:-webkit-auto;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px"><div><a href="http://www.heanet.ie" target="_blank">HEAnet Limited</a>, Ireland's Education and Research Network - </div><div>1st Floor, 5 George's Dock, IFSC, Dublin 1</div><div>Registered in Ireland, no 275301 tel: <a href="tel:%2B353-1-6609040" value="+35316609040" target="_blank">+353-1-6609040</a> fax: <a href="tel:%2B353-1-6603666" value="+35316603666" target="_blank">+353-1-6603666</a></div></span>
</div>
<br></div></div></div></div><br>--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br></blockquote></div><br></div>