<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<pre wrap=""><blockquote type="cite"><pre wrap="">Note you can get email to be released as NameID without also releasing
is as a SAML Attribute, too, that's documented here ("useUnfilteredAttributes"):</pre></blockquote><i></i></pre>
I have done this here <br>
<br>
<resolver:AttributeDefinition id="mail" xsi:type="ad:Simple" sourceAttributeID="mail"><br>
<resolver:Dependency ref="myLDAP" /><br>
<resolver:AttributeEncoder xsi:type="enc:SAML1String" name="urn:mace:dir:attribute-def:mail" encodeType="false" /><br>
<resolver:AttributeEncoder xsi:type="enc:SAML2String" name="urn:oid:0.9.2342.19200300.100.1.3" friendlyName="mail" encodeType="false" /><br>
</resolver:AttributeDefinition><br>
<br>
<blockquote type="cite">
<pre wrap="">Btw, are you ever going to provide feedback about the answers people
in this forum have taken care to provide, to help you solve /your/
problems? I only see questions asked, answers being provided, and then
new questions being asked.
Did the provided answers help/solve your issue (you're welcome) and if
not what was the problem?</pre>
</blockquote>
<br>
I am sorry for that i am new to this kind of communication. But i am very thankful for your.<br>
<br>
BTW this information helped a lot.<br>
<br>
Thx<br>
<br>
<div class="moz-cite-prefix">Am 04.08.2016 um 10:38 schrieb Peter Schober:<br>
</div>
<blockquote cite="mid:20160804083828.GU10046@aco.net" type="cite">
<pre wrap="">* Patrick Brunmayr <a class="moz-txt-link-rfc2396E" href="mailto:p.brunmayr@linzag.at"><p.brunmayr@linzag.at></a> [2016-08-04 10:00]:
</pre>
<blockquote type="cite">
<pre wrap="">I want to use the urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress NameIDFormat.
This is my idp configuration
idp-metadata.xml
<NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress</NameIDFormat>
</pre>
</blockquote>
<pre wrap="">
The IDP does not read its own metadata. You want to have that in the
(IDP's copy of) SP's metadata, that's what the IDP takes as input.
That's documented here:
<a class="moz-txt-link-freetext" href="https://wiki.shibboleth.net/confluence/display/IDP30/NameIDGenerationConfiguration#NameIDGenerationConfiguration-FormatSelectionFormatSelection">https://wiki.shibboleth.net/confluence/display/IDP30/NameIDGenerationConfiguration#NameIDGenerationConfiguration-FormatSelectionFormatSelection</a>
</pre>
<blockquote type="cite">
<pre wrap=""><AttributeRule attributeID="mail">
<PermitValueRule xsi:type="ANY" />
</AttributeRule>
</pre>
</blockquote>
<pre wrap="">
Note you can get email to be released as NameID without also releasing
is as a SAML Attribute, too, that's documented here ("useUnfilteredAttributes"):
<a class="moz-txt-link-freetext" href="https://wiki.shibboleth.net/confluence/display/IDP30/CustomNameIDGenerationConfiguration#CustomNameIDGenerationConfiguration-GeneralProcedure">https://wiki.shibboleth.net/confluence/display/IDP30/CustomNameIDGenerationConfiguration#CustomNameIDGenerationConfiguration-GeneralProcedure</a>
</pre>
<blockquote type="cite">
<pre wrap="">2016-08-04 08:44:55,762 - DEBUG
[org.opensaml.saml.common.profile.logic.MetadataNameIdentifierFormatStrategy:82]
- Metadata specifies the following formats: []
</pre>
</blockquote>
<pre wrap="">
The SP doesn't tell the IDP what formats it wants in its SAML 2.0 Metadata.
</pre>
<blockquote type="cite">
<pre wrap="">2016-08-04 08:44:55,763 - DEBUG
[net.shibboleth.idp.saml.profile.logic.DefaultNameIdentifierFormatStrategy:100]
- Configuration specifies the following formats: []
</pre>
</blockquote>
<pre wrap="">
</pre>
<blockquote type="cite">
<pre wrap="">2016-08-04 08:44:55,763 - DEBUG
[net.shibboleth.idp.saml.profile.logic.DefaultNameIdentifierFormatStrategy:110]
- No formats specified in configuration or in metadata, returning
default
</pre>
</blockquote>
<pre wrap="">
Those should be self-explanatory now.
</pre>
<blockquote type="cite">
<pre wrap="">2016-08-04 08:44:55,764 - DEBUG
[org.opensaml.saml.common.profile.impl.ChainingNameIdentifierGenerator:106]
- Trying to generate identifier with Format
urn:oasis:names:tc:SAML:2.0:nameid-format:transient
</pre>
</blockquote>
<pre wrap="">
</pre>
<blockquote type="cite">
<pre wrap="">2016-08-04 08:44:55,764 - DEBUG
[org.opensaml.saml.saml2.profile.impl.AddNameIDToSubjects:341] -
Profile Action AddNameIDToSubjects: Unable to generate a NameID,
leaving empty
</pre>
</blockquote>
<pre wrap="">
No idea what you did there, transients are enabled and fully working
out of the box. There's nothing to change about them.
</pre>
<blockquote type="cite">
<pre wrap="">Does the idp always use the idp.nameid.saml2.default settings when
no samlp:NameIDPolicy is present ? Why does he not check the
supportted NameIDFormat elements in idp.metadata.xml. Who is
responsible for selecting the format ?
</pre>
</blockquote>
<pre wrap="">
The URL at the top of this email should cover those.
Btw, are you ever going to provide feedback about the answers people
in this forum have taken care to provide, to help you solve /your/
problems? I only see questions asked, answers being provided, and then
new questions being asked.
Did the provided answers help/solve your issue (you're welcome) and if
not what was the problem?
-peter
</pre>
</blockquote>
<br>
<div class="moz-signature">-- <br>
<meta name="Generator" content="Microsoft Word 14 (filtered
medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.E-MailFormatvorlage17
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.E-MailFormatvorlage18
{mso-style-type:personal-reply;
font-family:"Arial","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 70.85pt 2.0cm 70.85pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
<p class="MsoNormal" style="margin-bottom:12.0pt"><b><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:black;mso-fareast-language:DE-AT">Patrick Brunmayr</span></b><span style="mso-fareast-language:DE-AT"><o:p></o:p></span></p>
<p class="MsoNormal"><b><span style="font-size:8.0pt;font-family:"Arial","sans-serif";color:green;mso-fareast-language:DE-AT">LINZ AG TELEKOM</span></b><span style="font-size:8.0pt;font-family:"Arial","sans-serif";color:green;mso-fareast-language:DE-AT"><br>
</span><span style="font-size:8.0pt;font-family:"Arial","sans-serif";color:black;mso-fareast-language:DE-AT">Infrastruktur & Netzwerktechnik</span><span style="mso-fareast-language:DE-AT"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Arial","sans-serif";color:black;mso-fareast-language:DE-AT">Internet Services</span><span style="mso-fareast-language:DE-AT"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Arial","sans-serif";mso-fareast-language:DE-AT"> </span><span style="mso-fareast-language:DE-AT"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Arial","sans-serif";color:black;mso-fareast-language:DE-AT">Die LINZ AG TELEKOM ist ein Geschäftsbereich der LINZ STROM GmbH<br>
für Energieerzeugung, -handel, -dienstleistungen und Telekommunikation.</span><span style="mso-fareast-language:DE-AT"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Arial","sans-serif";mso-fareast-language:DE-AT"> </span><span style="mso-fareast-language:DE-AT"><o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span style="font-size:8.0pt;font-family:"Arial","sans-serif";color:black;mso-fareast-language:DE-AT">4021 Linz, Wiener Straße 151, Austria<br>
Tel.: +43(0)732/3400-5639<br>
Fax: +43(0)732/3400-155639<br>
E-Mail: </span><u><span style="font-size:8.0pt;font-family:"Arial","sans-serif";color:blue;mso-fareast-language:DE-AT"><a href="mailto:p.brunmayr@linzag.at">p.brunmayr@linzag.at</a></span></u><span style="font-size:8.0pt;font-family:"Arial","sans-serif";mso-fareast-language:DE-AT"><br>
<span style="color:black">Internet: </span><a href="http://www.linzag-telekom.at">www.linzag-telekom.at</a><br>
<span style="color:black"><br>
FN 199533 g des Landesgerichtes Linz</span></span><span style="mso-fareast-language:DE-AT"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Arial","sans-serif";color:#333333;mso-fareast-language:DE-AT">Zertifiziert nach:</span><span style="mso-fareast-language:DE-AT"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Arial","sans-serif";color:#333333;mso-fareast-language:DE-AT">EN ISO 9001 Qualitätsmanagement (QM)</span><span style="mso-fareast-language:DE-AT"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Arial","sans-serif";color:#333333;mso-fareast-language:DE-AT">OHSAS 18001 Arbeitsschutzmanagementsystem</span><span style="mso-fareast-language:DE-AT"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Arial","sans-serif";color:#333333;mso-fareast-language:DE-AT">ISO/IEC 27001 Informationssicherheits-Managementsystem (ISMS)</span><span style="mso-fareast-language:DE-AT"><o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<span style="FONT-SIZE: 10pt"><font size="2" face="Arial">
<p style="margin-top: 10px"> </p>
<span style="FONT-SIZE: 10pt">
<div style="border-top: 1px dashed #808080; border-bottom: 1px dashed #808080"><font size="3"><span style="FONT-SIZE: 12pt"><font color="gray" size="2" face="Courier New">LINZ AG für Energie, Telekommunikation, Verkehr und Kommunale Dienste<br>
A-4021 Linz, Wiener Straße 151, Postfach 1300, Tel. +43/732/3400-0, E-Mail: info@linzag.at</font></span></font></div>
</span>
<p style="margin-top: 10px"> </p>
<div></div>
</font></span>
</body>
</html>