<html><head></head><body><div>Hi jmarsch,</div><div><br></div><div>Sorry for the confusion, as Scott points out, that isn't something you absolutely need to do there, I just did it for testing purposes. You can either alter the metadata, or have a specific stanza for them. </div><div><br></div><div>Here's what I did in saml-nameid.xml:</div><div><br></div><div><bean parent="shibboleth.SAML2AttributeSourcedGenerator"</div><div> p:format="urn:oasis:names:tc:SAML:1.1:nameid-format:eid"</div><div> p:attributeSourceIds="cn" /></div><div><br></div><div>The eid part is arbitrary, you just need to keep it consistent across the config.</div><div><br></div><div>Then, in relying-party.xml:</div><div><br></div><div><bean parent="RelyingPartyByName" c:relyingPartyIds="JMU.maps.arcgis.com"></div><div> <property name="profileConfigurations"></div><div> <list></div><div> <bean parent="SAML2.SSO" p:encryptAssertions="false" p:nameIDFormatPrecedence="urn:oasis:names:tc:SAML:1.1:nameid-format:eid"/></div><div><span class="Apple-tab-span" style="white-space:pre"> </span><span class="Apple-tab-span" style="white-space:pre"> </span></list></div><div> </property></div><div> </bean></div><div><br></div><div><br></div><div>You can also set the nameid in the metadata for them, I just figured I'd do it in their relying party since it already has special requirements.</div><div><br></div><div>Hope this helps some, but let me know.</div><div><br></div><div>I also welcome improvements to that configuration.</div><div><br></div><div>Thanks,</div><div><br></div><div>Brandon</div><div><br></div><div>On Wed, 2015-07-01 at 11:50 -0700, jmarsch wrote:</div><blockquote type="cite"><pre><blockquote type="cite">
Lastly you need to make sure that nameid format is being used for
arcgis. I'm currently doing it globally in relying-party.xml since it's
a testbox,
</blockquote>
Hi Brandon:
I'm following your thread -- I am trying to build a similar test instance.
I am extremely new to Shibboleth. I'm following your config snippets, and
sadly, I simply don't know how to perform the step that you have quoted
above (make a nameid format used globally in rely-party.xml).
Can you post a snippet?
--
View this message in context: <a href="http://shibboleth.1660669.n2.nabble.com/ArcGIS-on-Shib-3-tp7616612p7616865.html">http://shibboleth.1660669.n2.nabble.com/ArcGIS-on-Shib-3-tp7616612p7616865.html</a>
Sent from the Shibboleth - Users mailing list archive at Nabble.com.
</pre></blockquote></body></html>