<div dir="ltr">Hi,<br><br>We have an Idp3. It's working mostly fine. There are problems with Google's GAFE.<br><br>In relying-party.xml we have:<br>----------------------------<br>        <bean parent="RelyingPartyByName" c:relyingPartyIds="<a href="http://google.com">google.com</a>">              <br>            <property name="profileConfigurations">                             <br>                <list>                                                         <br>                    <bean parent="SAML2.SSO" <br>                         p:nameIDFormatPrecedence="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified" <br>                         p:encryptAssertions="false" /><br>                         p:postAuthenticationFlows="#{ {'context-check'} }"/> <br>                </list>        <br>            </property>  <br>        </bean><br>-------------------------<br><br>Attribute-filter and attribute-resolver are similar to old idp2. GAFE worked before.<br><br>After login GAFE says:<br>-----------------------<br>This account cannot be accessed because we could not parse the login request.<br><br><br>idp-process.log:<br>-----------------------------------<br>WARN [org.opensaml.saml.common.profile.logic.MetadataNameIdentifierFormatStrategy:75] - Ignoring NameIDFormat metadata that includes the 'unspecified' format<br><br>Where should I start to find the solution?<br><br>Thanks,<br>Jukka<br></div>