<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman","serif";
mso-believe-normal-left:yes;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><![if mso 9]><style>p.MsoNormal
{margin-left:7.5pt;}
</style><![endif]><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple" style="margin-left:7.5pt;margin-top:7.5pt;margin-right:7.5pt;margin-bottom:7.5pt">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">I was able to fix this problem by telling salesforce to accept our basic uid attribute back. There was no need to send the header back in the subjectname.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">In the admin console for sales force you can tell it the name of the attribute want back, which in our case was uid and tell it to accept it back as
</span><span style="font-size:9.0pt;font-family:Consolas;color:#183691;background:white">urn:oasis:names:tc:SAML:2.0:attrname-format:basic</span><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p></o:p></span></p>
<p class="MsoNormal" style="margin:0in;margin-bottom:.0001pt;line-height:12.05pt;text-autospace:none">
<b><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:black">Charles Cahill</span></b><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:black"><o:p></o:p></span></p>
<p class="MsoNormal" style="margin:0in;margin-bottom:.0001pt;line-height:12.05pt;text-autospace:none">
<span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:black">Senior Technologist - Authentication/Authorization<o:p></o:p></span></p>
<p class="MsoNormal" style="margin:0in;margin-bottom:.0001pt;line-height:12.05pt;text-autospace:none">
<span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:black">TAS App Svcs, SSO/LDAP/Web Application Support<o:p></o:p></span></p>
<p class="MsoNormal" style="margin:0in;margin-bottom:.0001pt;line-height:12.05pt;text-autospace:none">
<span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:black">GE Appliances & Lighting<o:p></o:p></span></p>
<p class="MsoNormal" style="margin:0in;margin-bottom:.0001pt"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal" style="margin:0in;margin-bottom:.0001pt;line-height:12.05pt;text-autospace:none">
<span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:black">GE Appliance Park<o:p></o:p></span></p>
<p class="MsoNormal" style="margin:0in;margin-bottom:.0001pt;line-height:12.05pt;text-autospace:none">
<span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:black">Louisville, Ky/40225<o:p></o:p></span></p>
<p class="MsoNormal" style="margin:0in;margin-bottom:.0001pt"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal" style="margin:0in;margin-bottom:.0001pt"><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#0070C0">GE imagination at work<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal" style="margin:0in;margin-bottom:.0001pt"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> users [mailto:users-bounces@shibboleth.net]
<b>On Behalf Of </b>Clayton<br>
<b>Sent:</b> Tuesday, November 17, 2015 3:39 PM<br>
<b>To:</b> users@shibboleth.net<br>
<b>Subject:</b> Re: SAML Salesforce Reponse coming in Transient Format<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal" style="margin:0in;margin-bottom:.0001pt"><span style="font-size:14.0pt;font-family:"Calibri","sans-serif";color:black">I'm trying to understand this and am looking at the metadata for one of our SP's.</span><o:p></o:p></p>
<p class="MsoNormal" style="margin:0in;margin-bottom:.0001pt"><o:p> </o:p></p>
<p class="MsoNormal" style="margin:0in;margin-bottom:.0001pt"><span style="font-size:14.0pt;font-family:"Calibri","sans-serif";color:black">What part of this SP metadata tells our Shib IdP which NameID format to select?</span><o:p></o:p></p>
<p class="MsoNormal" style="margin:0in;margin-bottom:.0001pt"><o:p> </o:p></p>
<p class="MsoNormal" style="margin:0in;margin-bottom:.0001pt"><span style="font-size:14.0pt;font-family:"Calibri","sans-serif";color:black"><md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" ID="_456789987b9c1c0c917e2fe4379f68ea45678987" entityID="<a href="https://xxxxxxxxxxxxxcom">https://xxxxxxxxxxxxxcom</a>"></span><o:p></o:p></p>
<p class="MsoNormal" style="margin:0in;margin-bottom:.0001pt"><o:p> </o:p></p>
<p class="MsoNormal" style="margin:0in;margin-bottom:.0001pt"><span style="font-size:14.0pt;font-family:"Calibri","sans-serif";color:black"> <md:Extensions xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport"></span><o:p></o:p></p>
<p class="MsoNormal" style="margin:0in;margin-bottom:.0001pt"><span style="font-size:14.0pt;font-family:"Calibri","sans-serif";color:black"> <alg:DigestMethod Algorithm="<a href="http://www.w3.org/2001/04/xmlenc#sha512">http://www.w3.org/2001/04/xmlenc#sha512</a>"/></span><o:p></o:p></p>
<p class="MsoNormal" style="margin:0in;margin-bottom:.0001pt"><span style="font-size:14.0pt;font-family:"Calibri","sans-serif";color:black"> <alg:DigestMethod Algorithm="<a href="http://www.w3.org/2001/04/xmldsig-more#sha384">http://www.w3.org/2001/04/xmldsig-more#sha384</a>"/></span><o:p></o:p></p>
<p class="MsoNormal" style="margin:0in;margin-bottom:.0001pt"><span style="font-size:14.0pt;font-family:"Calibri","sans-serif";color:black"> <alg:DigestMethod Algorithm="<a href="http://www.w3.org/2001/04/xmlenc#sha256">http://www.w3.org/2001/04/xmlenc#sha256</a>"/></span><o:p></o:p></p>
<p class="MsoNormal" style="margin:0in;margin-bottom:.0001pt"><span style="font-size:14.0pt;font-family:"Calibri","sans-serif";color:black"> <alg:DigestMethod Algorithm="<a href="http://www.w3.org/2001/04/xmldsig-more#sha224">http://www.w3.org/2001/04/xmldsig-more#sha224</a>"/></span><o:p></o:p></p>
<p class="MsoNormal" style="margin:0in;margin-bottom:.0001pt"><span style="font-size:14.0pt;font-family:"Calibri","sans-serif";color:black"> <alg:DigestMethod Algorithm="<a href="http://www.w3.org/2000/09/xmldsig#sha1">http://www.w3.org/2000/09/xmldsig#sha1</a>"/></span><o:p></o:p></p>
<p class="MsoNormal" style="margin:0in;margin-bottom:.0001pt"><span style="font-size:14.0pt;font-family:"Calibri","sans-serif";color:black"> <alg:SigningMethod Algorithm="<a href="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha512">http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha512</a>"/></span><o:p></o:p></p>
<p class="MsoNormal" style="margin:0in;margin-bottom:.0001pt"><span style="font-size:14.0pt;font-family:"Calibri","sans-serif";color:black"> <alg:SigningMethod Algorithm="<a href="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha384">http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha384</a>"/></span><o:p></o:p></p>
<p class="MsoNormal" style="margin:0in;margin-bottom:.0001pt"><span style="font-size:14.0pt;font-family:"Calibri","sans-serif";color:black"> <alg:SigningMethod Algorithm="<a href="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha256">http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha256</a>"/></span><o:p></o:p></p>
<p class="MsoNormal" style="margin:0in;margin-bottom:.0001pt"><span style="font-size:14.0pt;font-family:"Calibri","sans-serif";color:black"> <alg:SigningMethod Algorithm="<a href="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha224">http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha224</a>"/></span><o:p></o:p></p>
<p class="MsoNormal" style="margin:0in;margin-bottom:.0001pt"><span style="font-size:14.0pt;font-family:"Calibri","sans-serif";color:black"> <alg:SigningMethod Algorithm="<a href="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512">http://www.w3.org/2001/04/xmldsig-more#rsa-sha512</a>"/></span><o:p></o:p></p>
<p class="MsoNormal" style="margin:0in;margin-bottom:.0001pt"><span style="font-size:14.0pt;font-family:"Calibri","sans-serif";color:black"> <alg:SigningMethod Algorithm="<a href="http://www.w3.org/2001/04/xmldsig-more#rsa-sha384">http://www.w3.org/2001/04/xmldsig-more#rsa-sha384</a>"/></span><o:p></o:p></p>
<p class="MsoNormal" style="margin:0in;margin-bottom:.0001pt"><span style="font-size:14.0pt;font-family:"Calibri","sans-serif";color:black"> <alg:SigningMethod Algorithm="<a href="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256">http://www.w3.org/2001/04/xmldsig-more#rsa-sha256</a>"/></span><o:p></o:p></p>
<p class="MsoNormal" style="margin:0in;margin-bottom:.0001pt"><span style="font-size:14.0pt;font-family:"Calibri","sans-serif";color:black"> <alg:SigningMethod Algorithm="<a href="http://www.w3.org/2009/xmldsig11#dsa-sha256">http://www.w3.org/2009/xmldsig11#dsa-sha256</a>"/></span><o:p></o:p></p>
<p class="MsoNormal" style="margin:0in;margin-bottom:.0001pt"><span style="font-size:14.0pt;font-family:"Calibri","sans-serif";color:black"> <alg:SigningMethod Algorithm="<a href="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha1">http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha1</a>"/></span><o:p></o:p></p>
<p class="MsoNormal" style="margin:0in;margin-bottom:.0001pt"><span style="font-size:14.0pt;font-family:"Calibri","sans-serif";color:black"> <alg:SigningMethod Algorithm="<a href="http://www.w3.org/2000/09/xmldsig#rsa-sha1">http://www.w3.org/2000/09/xmldsig#rsa-sha1</a>"/></span><o:p></o:p></p>
<p class="MsoNormal" style="margin:0in;margin-bottom:.0001pt"><span style="font-size:14.0pt;font-family:"Calibri","sans-serif";color:black"> <alg:SigningMethod Algorithm="<a href="http://www.w3.org/2000/09/xmldsig#dsa-sha1">http://www.w3.org/2000/09/xmldsig#dsa-sha1</a>"/></span><o:p></o:p></p>
<p class="MsoNormal" style="margin:0in;margin-bottom:.0001pt"><span style="font-size:14.0pt;font-family:"Calibri","sans-serif";color:black"> </md:Extensions></span><o:p></o:p></p>
<p class="MsoNormal" style="margin:0in;margin-bottom:.0001pt"><o:p> </o:p></p>
<p class="MsoNormal" style="margin:0in;margin-bottom:.0001pt"><span style="font-size:14.0pt;font-family:"Calibri","sans-serif";color:black"> <md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol
urn:oasis:names:tc:SAML:1.0:protocol"></span><o:p></o:p></p>
<p class="MsoNormal" style="margin:0in;margin-bottom:.0001pt"><span style="font-size:14.0pt;font-family:"Calibri","sans-serif";color:black"> <md:Extensions></span><o:p></o:p></p>
<p class="MsoNormal" style="margin:0in;margin-bottom:.0001pt"><span style="font-size:14.0pt;font-family:"Calibri","sans-serif";color:black"> <init:RequestInitiator xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init"
Location="<a href="https://xxxxxxxxxxxxxxxxxxxcom/Shibboleth..sso/Login">https://xxxxxxxxxxxxxxxxxxxcom/Shibboleth..sso/Login</a>"/></span><o:p></o:p></p>
<p class="MsoNormal" style="margin:0in;margin-bottom:.0001pt"><span style="font-size:14.0pt;font-family:"Calibri","sans-serif";color:black"> </md:Extensions></span><o:p></o:p></p>
<p class="MsoNormal" style="margin:0in;margin-bottom:.0001pt"><span style="font-size:14.0pt;font-family:"Calibri","sans-serif";color:black"> <md:KeyDescriptor></span><o:p></o:p></p>
<p class="MsoNormal" style="margin:0in;margin-bottom:.0001pt"><span style="font-size:14.0pt;font-family:"Calibri","sans-serif";color:black"> <ds:KeyInfo xmlns:ds="<a href="http://www.w3.org/2000/09/xmldsig#">http://www.w3.org/2000/09/xmldsig#</a>"></span><o:p></o:p></p>
<p class="MsoNormal" style="margin:0in;margin-bottom:.0001pt"><span style="font-size:14.0pt;font-family:"Calibri","sans-serif";color:black"> <ds:KeyName>rd00155de1e7c0</ds:KeyName></span><o:p></o:p></p>
<p class="MsoNormal" style="margin:0in;margin-bottom:.0001pt"><span style="font-size:14.0pt;font-family:"Calibri","sans-serif";color:black"> <ds:X509Data></span><o:p></o:p></p>
<p class="MsoNormal" style="margin:0in;margin-bottom:.0001pt"><span style="font-size:14.0pt;font-family:"Calibri","sans-serif";color:black"> <ds:X509SubjectName>CN=rd00235de1e7ff</ds:X509SubjectName></span><o:p></o:p></p>
<p class="MsoNormal" style="margin:0in;margin-bottom:.0001pt"><span style="font-size:14.0pt;font-family:"Calibri","sans-serif";color:black"> <ds:X509Certificate>xxxxxxx==</ds:X509Certificate></span><o:p></o:p></p>
<p class="MsoNormal" style="margin:0in;margin-bottom:.0001pt"><span style="font-size:14.0pt;font-family:"Calibri","sans-serif";color:black"> </ds:X509Data></span><o:p></o:p></p>
<p class="MsoNormal" style="margin:0in;margin-bottom:.0001pt"><span style="font-size:14.0pt;font-family:"Calibri","sans-serif";color:black"> </ds:KeyInfo></span><o:p></o:p></p>
<p class="MsoNormal" style="margin:0in;margin-bottom:.0001pt"><span style="font-size:14.0pt;font-family:"Calibri","sans-serif";color:black"> <md:EncryptionMethod Algorithm="<a href="http://www.w3.org/2009/xmlenc11#aes128-gcm">http://www.w3.org/2009/xmlenc11#aes128-gcm</a>"/></span><o:p></o:p></p>
<p class="MsoNormal" style="margin:0in;margin-bottom:.0001pt"><span style="font-size:14.0pt;font-family:"Calibri","sans-serif";color:black"> <md:EncryptionMethod Algorithm="<a href="http://www.w3.org/2009/xmlenc11#aes192-gcm">http://www.w3.org/2009/xmlenc11#aes192-gcm</a>"/></span><o:p></o:p></p>
<p class="MsoNormal" style="margin:0in;margin-bottom:.0001pt"><span style="font-size:14.0pt;font-family:"Calibri","sans-serif";color:black"> <md:EncryptionMethod Algorithm="<a href="http://www.w3.org/2009/xmlenc11#aes256-gcm">http://www.w3.org/2009/xmlenc11#aes256-gcm</a>"/></span><o:p></o:p></p>
<p class="MsoNormal" style="margin:0in;margin-bottom:.0001pt"><span style="font-size:14.0pt;font-family:"Calibri","sans-serif";color:black"> <md:EncryptionMethod Algorithm="<a href="http://www.w3.org/2001/04/xmlenc#aes128-cbc">http://www.w3.org/2001/04/xmlenc#aes128-cbc</a>"/></span><o:p></o:p></p>
<p class="MsoNormal" style="margin:0in;margin-bottom:.0001pt"><span style="font-size:14.0pt;font-family:"Calibri","sans-serif";color:black"> <md:EncryptionMethod Algorithm="<a href="http://www.w3.org/2001/04/xmlenc#aes192-cbc">http://www.w3.org/2001/04/xmlenc#aes192-cbc</a>"/></span><o:p></o:p></p>
<p class="MsoNormal" style="margin:0in;margin-bottom:.0001pt"><span style="font-size:14.0pt;font-family:"Calibri","sans-serif";color:black"> <md:EncryptionMethod Algorithm="<a href="http://www.w3.org/2001/04/xmlenc#aes256-cbc">http://www.w3.org/2001/04/xmlenc#aes256-cbc</a>"/></span><o:p></o:p></p>
<p class="MsoNormal" style="margin:0in;margin-bottom:.0001pt"><span style="font-size:14.0pt;font-family:"Calibri","sans-serif";color:black"> <md:EncryptionMethod Algorithm="<a href="http://www.w3.org/2001/04/xmlenc#tripledes-cbc">http://www.w3.org/2001/04/xmlenc#tripledes-cbc</a>"/></span><o:p></o:p></p>
<p class="MsoNormal" style="margin:0in;margin-bottom:.0001pt"><span style="font-size:14.0pt;font-family:"Calibri","sans-serif";color:black"> <md:EncryptionMethod Algorithm="<a href="http://www.w3.org/2009/xmlenc11#rsa-oaep">http://www.w3.org/2009/xmlenc11#rsa-oaep</a>"/></span><o:p></o:p></p>
<p class="MsoNormal" style="margin:0in;margin-bottom:.0001pt"><span style="font-size:14.0pt;font-family:"Calibri","sans-serif";color:black"> <md:EncryptionMethod Algorithm="<a href="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p">http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p</a>"/></span><o:p></o:p></p>
<p class="MsoNormal" style="margin:0in;margin-bottom:.0001pt"><span style="font-size:14.0pt;font-family:"Calibri","sans-serif";color:black"> </md:KeyDescriptor></span><o:p></o:p></p>
<p class="MsoNormal" style="margin:0in;margin-bottom:.0001pt"><span style="font-size:14.0pt;font-family:"Calibri","sans-serif";color:black"> <md:ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="<a href="https://xxxxxxxxxxxxxxxxxxxcom/Shibboleth.sso/Artifact/SOAP">https://xxxxxxxxxxxxxxxxxxxcom/Shibboleth.sso/Artifact/SOAP</a>"
index="1"/></span><o:p></o:p></p>
<p class="MsoNormal" style="margin:0in;margin-bottom:.0001pt"><span style="font-size:14.0pt;font-family:"Calibri","sans-serif";color:black"> <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="<a href="https://xxxxxxxxxxxxxxxxxxxcom/Shibboleth.sso/SLO/SOAP">https://xxxxxxxxxxxxxxxxxxxcom/Shibboleth.sso/SLO/SOAP</a>"/></span><o:p></o:p></p>
<p class="MsoNormal" style="margin:0in;margin-bottom:.0001pt"><span style="font-size:14.0pt;font-family:"Calibri","sans-serif";color:black"> <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="<a href="https://xxxxxxxxxxxxxxxxxxxcom/Shibboleth.sso/SLO/Redirect">https://xxxxxxxxxxxxxxxxxxxcom/Shibboleth.sso/SLO/Redirect</a>"/></span><o:p></o:p></p>
<p class="MsoNormal" style="margin:0in;margin-bottom:.0001pt"><span style="font-size:14.0pt;font-family:"Calibri","sans-serif";color:black"> <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="<a href="https://xxxxxxxxxxxxxxxxxxxcom/Shibboleth.sso/SLO/POST">https://xxxxxxxxxxxxxxxxxxxcom/Shibboleth.sso/SLO/POST</a>"/></span><o:p></o:p></p>
<p class="MsoNormal" style="margin:0in;margin-bottom:.0001pt"><span style="font-size:14.0pt;font-family:"Calibri","sans-serif";color:black"> <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="<a href="https://xxxxxxxxxxxxxxxxxxxcom/Shibboleth.sso/SLO/Artifact">https://xxxxxxxxxxxxxxxxxxxcom/Shibboleth.sso/SLO/Artifact</a>"/></span><o:p></o:p></p>
<p class="MsoNormal" style="margin:0in;margin-bottom:.0001pt"><span style="font-size:14.0pt;font-family:"Calibri","sans-serif";color:black"> <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="<a href="https://xxxxxxxxxxxxxxxxxxxcom/Shibboleth.sso/SAML2/POST">https://xxxxxxxxxxxxxxxxxxxcom/Shibboleth.sso/SAML2/POST</a>"
index="1"/></span><o:p></o:p></p>
<p class="MsoNormal" style="margin:0in;margin-bottom:.0001pt"><span style="font-size:14.0pt;font-family:"Calibri","sans-serif";color:black"> <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="<a href="https://xxxxxxxxxxxxxxxxxxxcom/Shibboleth.sso/SAML2/POST-SimpleSign">https://xxxxxxxxxxxxxxxxxxxcom/Shibboleth.sso/SAML2/POST-SimpleSign</a>"
index="2"/></span><o:p></o:p></p>
<p class="MsoNormal" style="margin:0in;margin-bottom:.0001pt"><span style="font-size:14.0pt;font-family:"Calibri","sans-serif";color:black"> <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="<a href="https://xxxxxxxxxxxxxxxxxxxcom/Shibboleth.sso/SAML2/Artifact">https://xxxxxxxxxxxxxxxxxxxcom/Shibboleth.sso/SAML2/Artifact</a>"
index="3"/></span><o:p></o:p></p>
<p class="MsoNormal" style="margin:0in;margin-bottom:.0001pt"><span style="font-size:14.0pt;font-family:"Calibri","sans-serif";color:black"> <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="<a href="https://xxxxxxxxxxxxxxxxxxxcom/Shibboleth.sso/SAML2/ECP">https://xxxxxxxxxxxxxxxxxxxcom/Shibboleth.sso/SAML2/ECP</a>"
index="4"/></span><o:p></o:p></p>
<p class="MsoNormal" style="margin:0in;margin-bottom:.0001pt"><span style="font-size:14.0pt;font-family:"Calibri","sans-serif";color:black"> <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="<a href="https://xxxxxxxxxxxxxxxxxxxcom/Shibboleth.sso/SAML/POST">https://xxxxxxxxxxxxxxxxxxxcom/Shibboleth.sso/SAML/POST</a>"
index="5"/></span><o:p></o:p></p>
<p class="MsoNormal" style="margin:0in;margin-bottom:.0001pt"><span style="font-size:14.0pt;font-family:"Calibri","sans-serif";color:black"> <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="<a href="https://xxxxxxxxxxxxxxxxxxxcom/Shibboleth.sso/SAML/Artifact">https://xxxxxxxxxxxxxxxxxxxcom/Shibboleth.sso/SAML/Artifact</a>"
index="6"/></span><o:p></o:p></p>
<p class="MsoNormal" style="margin:0in;margin-bottom:.0001pt"><span style="font-size:14.0pt;font-family:"Calibri","sans-serif";color:black"> </md:SPSSODescriptor></span><o:p></o:p></p>
<p class="MsoNormal" style="margin:0in;margin-bottom:.0001pt"><o:p> </o:p></p>
<p class="MsoNormal" style="margin:0in;margin-bottom:.0001pt"><span style="font-size:14.0pt;font-family:"Calibri","sans-serif";color:black"></md:EntityDescriptor></span><o:p></o:p></p>
<p class="MsoNormal" style="margin:0in;margin-bottom:.0001pt"><o:p> </o:p></p>
<p class="MsoNormal" style="margin:0in;margin-bottom:.0001pt"><span style="font-size:14.0pt;font-family:"Calibri","sans-serif";color:black">--Clayton</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:0in;margin-right:0in;margin-bottom:12.0pt;margin-left:0in">
<o:p> </o:p></p>
<p class="MsoNormal" style="margin:0in;margin-bottom:.0001pt"><b><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:black">"Shib Users users-at-shibboleth.net |Shib|" <<a href="mailto:3unnche4it@sneakemail.com">3unnche4it@sneakemail.com</a>>
on Friday, November 13, 2015 at 3:34 PM -0500 wrote:</span></b><o:p></o:p></p>
<p class="MsoNormal" style="margin:0in;margin-bottom:.0001pt"><span style="color:black;background:#D0D0D0">On 11/13/15, 3:14 PM, "users on behalf of Cahill, Charles (GE Appliances)" wrote:</span><o:p></o:p></p>
<p class="MsoNormal" style="margin:0in;margin-bottom:.0001pt"><span style="color:black;background:#D0D0D0">>I am still really confused on this. I changed the nameid-format to persistent, but it</span><o:p></o:p></p>
<p class="MsoNormal" style="margin:0in;margin-bottom:.0001pt"><span style="color:black;background:#D0D0D0">>is still coming back in the saml response as transient.</span><o:p></o:p></p>
<p class="MsoNormal" style="margin:0in;margin-bottom:.0001pt"><span style="color:black;background:#D0D0D0">I don't know what that means or what you changed..</span><o:p></o:p></p>
<p class="MsoNormal" style="margin:0in;margin-bottom:.0001pt"><span style="color:black;background:#D0D0D0">There is configuration for generating NameIDs in various formats as required, and then you have machinery in various places that controls the selection
of the format, principally the SP's metadata.</span><o:p></o:p></p>
<p class="MsoNormal" style="margin:0in;margin-bottom:.0001pt"><span style="color:black;background:#D0D0D0">Beyond that it depends on the version.</span><o:p></o:p></p>
<p class="MsoNormal" style="margin:0in;margin-bottom:.0001pt"><span style="color:black;background:#D0D0D0">V3</span><o:p></o:p></p>
<p class="MsoNormal" style="margin:0in;margin-bottom:.0001pt"><span style="color:black;background:#D0D0D0"><a href="https://wiki.shibboleth.net/confluence/display/IDP30/NameIDGenerationConfiguration" target="_blank">https://wiki.shibboleth.net/confluence/display/IDP30/NameIDGenerationConfiguration</a></span><o:p></o:p></p>
<p class="MsoNormal" style="margin:0in;margin-bottom:.0001pt"><span style="color:black;background:#D0D0D0">V2 (much harder to follow, but that's what you get for running code a year or more out of date)</span><o:p></o:p></p>
<p class="MsoNormal" style="margin:0in;margin-bottom:.0001pt"><span style="color:black;background:#D0D0D0"><a href="https://wiki.shibboleth.net/confluence/display/SHIB2/IdPNameIdentifier" target="_blank">https://wiki.shibboleth.net/confluence/display/SHIB2/IdPNameIdentifier</a></span><o:p></o:p></p>
<p class="MsoNormal" style="margin:0in;margin-bottom:.0001pt"><span style="color:black;background:#D0D0D0">-- Scott</span><o:p></o:p></p>
<p class="MsoNormal" style="margin:0in;margin-bottom:.0001pt"><span style="color:black;background:#D0D0D0">--
</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:0in;margin-right:0in;margin-bottom:12.0pt;margin-left:0in">
<o:p> </o:p></p>
</div>
</body>
</html>