<div dir="ltr"><div class="gmail_quote"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">the SP's metadata should include an NameIDFormat element with the Format it wants to get.<br></blockquote><div><br></div><div>Specifying nameIDPrecedence on the RP was the only mechanism that worked for me. I have an SP that needs unspecified, and despite the desired format appearing in both the metadata<br></div><div><br></div><div><div><EntityDescriptor entityID="<a href="https://foo.cc.vt.edu/sites.html/content">https://foo.cc.vt.edu/sites.html/content</a>"></div><div> <SPSSODescriptor protocolSupportEnumeration="</div><div> urn:oasis:names:tc:SAML:2.0:protocol</div><div> urn:oasis:names:tc:SAML:1.1:protocol"</div><div> AuthnRequestsSigned="false"</div><div> WantAssertionsSigned="true"></div><div> <NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified</NameIDFormat>...</div></div><div><br></div><div>and the AuthnRequest</div><div><br></div><div><div><samlp:AuthnRequest...></div><div> <saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion"><a href="https://foo.cc.vt.edu/sites.html/content">https://foo.cc.vt.edu/sites.html/content</a></saml:Issuer></div><div> <samlp:NameIDPolicy AllowCreate="true" Format="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified"/></div><div></samlp:AuthnRequest></div></div><div><br></div><div>the IdP is still sending the default NameID format. When I explicitly set the precedence with unspecified first in an override for that particular entity, it works as desired.<br></div><div><br></div><div>M<a href="mailto:users-unsubscribe@shibboleth.net" target="_blank"></a><br>
</div><div><br></div></div></div>