<div dir="ltr"><br><div class="gmail_extra"><br><div class="gmail_quote">On Tue, May 24, 2016 at 10:11 AM, Peter Schober <span dir="ltr"><<a href="mailto:peter.schober@univie.ac.at" target="_blank">peter.schober@univie.ac.at</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-style:solid;border-left-color:rgb(204,204,204);padding-left:1ex">* IAM David Bantz <<a href="mailto:dabantz@alaska.edu">dabantz@alaska.edu</a>> [2016-05-24 19:28]:<br>
<span class="">> <!-- Bb Transact require something like ePPN in the SAML Subject --><br>
<br>
</span>What format are you sending, then? </blockquote><div><br></div><div><span style="color:rgb(0,0,0);font-size:13px;background-color:rgb(247,247,247)">nameFormat="urn:oasis:names:tc:SAML:2.0:nameid-format:transient" </span></div><div><br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-style:solid;border-left-color:rgb(204,204,204);padding-left:1ex">
<br>
And they're making attribute queries then, based on that NameID value<br>
from the subject? </blockquote><div><br></div><div>Yes</div><div><br></div><div>David Bantz</div><div>UAlaska OIT IAM </div></div><br></div></div>