<div dir="ltr"><div><div><div><div><div>My SP requires the assertion:<br>
nameFormat="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified<br></div>or<br>
nameFormat="urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress<br><br></div>I used the following config to pass uid to pass this in shibboleth version 2<br><br></div>attribute_resolver.xml<br>    <resolver:AttributeDefinition xsi:type="ad:Simple" id="uid" sourceAttributeID="uid"><br>        <resolver:Dependency ref="myLDAP" /><br>        <resolver:AttributeEncoder xsi:type="enc:SAML1StringNameIdentifier" nameFormat="urn:mace:shibboleth:1.0:nameIdentifier"/><br>        <resolver:AttributeEncoder xsi:type="enc:SAML1String" name="urn:mace:dir:attribute-def:uid" /><br>        <resolver:AttributeEncoder xsi:type="enc:SAML2StringNameID" nameFormat="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified"/><br>    <resolver:AttributeEncoder xsi:type="enc:SAML2StringNameID" nameFormat="urn:oasis:names:tc:SAML:2.0:nameid-format:transient"/><br>    </resolver:AttributeDefinition><br><br></div>relying_party.xml<br>        <rp:RelyingParty<br>                id="<a href="http://fs.ultiproworkplace.com/adfs/services/trust" target="_blank">http://fs.ultiproworkplace.com/adfs/services/trust</a>"<br>                provider="<a href="https://idp.squarespace.net/idp/shibboleth" target="_blank">https://idp.squarespace.net/idp/shibboleth</a>"<br>                defaultAuthenticationMethod="urn:oasis:names:tc:SAML:2.0:ac:classes:unspecified"<br>        defaultSigningCredentialRef="IdPCredential"><br><rp:ProfileConfiguration xsi:type="saml:SAML2SSOProfile"<br>        includeAttributeStatement="true"<br>        assertionLifetime="300000"<br>        assertionProxyCount="0"<br>        signResponses="conditional"<br>        signAssertions="never"<br>        signRequests="conditional"<br>        encryptAssertions="never"<br>        encryptNameIds="never"<br>/><br>        </rp:RelyingParty><br><br><br></div><div>Version 3 carried over a different relying_party config<br>        <bean parent="RelyingPartyByName" c:relyingPartyIds="<a href="http://fs.ultiproworkplace.com/adfs/services/trust" target="_blank">http://fs.ultiproworkplace.com/adfs/services/trust</a>"><br>            <property name="profileConfigurations"><br>                <list><br>                    <bean parent="SAML2.SSO" p:encryptAssertions="false" /><br>                </list><br>            </property><br>        </bean><br><br></div><div>And I used the same attribute_resolver config for version 3.<br></div>When decoding the saml response, it's not showing a 1.1:nameid-format anymore, only 2.0 formats.</div>