<html>
  <head>
    <meta content="text/html; charset=windows-1252"
      http-equiv="Content-Type">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    <p><br>
    </p>
    <br>
    <div class="moz-cite-prefix">On 8/10/16 5:22 PM, Cantor, Scott
      wrote:<br>
    </div>
    <blockquote cite="mid:045BE4F7-87FC-488A-9533-8175C8F230F1@osu.edu"
      type="cite"><br>
      <pre wrap="">It won't do that for you unless you tell it to support emailAddress format.

<a class="moz-txt-link-freetext" href="https://wiki.shibboleth.net/confluence/display/IDP30/NameIDConsumptionConfiguration">https://wiki.shibboleth.net/confluence/display/IDP30/NameIDConsumptionConfiguration</a>

If you did that, </pre>
    </blockquote>
    <br>
    For the record, in my testing I did do that, and it worked for me. 
    Part of my conf/c14n/subject-c14n.xml looks like the following.  I
    added the 'urn:test:netid' format to support direct transform of
    that (made up) format, as well as the entityIDs to the list in the
    predicate to allow its use for them.<br>
    <br>
    <br>
    <blockquote cite="mid:045BE4F7-87FC-488A-9533-8175C8F230F1@osu.edu"
      type="cite">
    </blockquote>
    <tt>    <!-- What SAML NameID formats do you want to support
      direct transformations for? --></tt><tt><br>
    </tt><tt>    <util:list id="shibboleth.NameTransformFormats"></tt><tt><br>
    </tt><tt>       
<value>urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified</value></tt><tt><br>
    </tt><tt>       
<value>urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress</value></tt><tt><br>
    </tt><tt>       
<value>urn:oasis:names:tc:SAML:1.1:nameid-format:X509SubjectName</value></tt><tt><br>
    </tt><tt>       
<value>urn:oasis:names:tc:SAML:1.1:nameid-format:WindowsDomainQualifiedName</value></tt><tt><br>
    </tt><tt>       
<value>urn:oasis:names:tc:SAML:2.0:nameid-format:kerberos</value></tt><tt><br>
    </tt><tt>        <value>urn:test:netid</value></tt><tt><br>
    </tt><tt>    </util:list></tt><tt><br>
    </tt><tt><br>
    </tt><tt>    <!--</tt><tt><br>
    </tt><tt>    Under what conditions should direct NameID mapping be
      allowed? By default, never.</tt><tt><br>
    </tt><tt>    Any condition can be used here; the example is suitable
      for enumerating a number of SPs to allow.</tt><tt><br>
    </tt><tt>    --></tt><tt><br>
    </tt><tt>    <bean id="shibboleth.NameTransformPredicate"
      parent="shibboleth.Conditions.RelyingPartyId"></tt><tt><br>
    </tt><tt>        <constructor-arg></tt><tt><br>
    </tt><tt>            <util:list></tt><tt><br>
    </tt><tt>                <!--
      <value><a class="moz-txt-link-freetext" href="https://sp.example.org">https://sp.example.org</a></value> --></tt><tt><br>
    </tt><tt>               
      <value><a class="moz-txt-link-freetext" href="https://sp.example.org/shibboleth">https://sp.example.org/shibboleth</a></value></tt><tt><br>
    </tt><tt>               
      <value><a class="moz-txt-link-freetext" href="https://portal.example.edu/shibboleth">https://portal.example.edu/shibboleth</a></value></tt><tt><br>
    </tt><tt>               
      <value><a class="moz-txt-link-freetext" href="https://service.example.com/shibboleth">https://service.example.com/shibboleth</a></value></tt><tt><br>
    </tt><tt>            </util:list></tt><tt><br>
    </tt><tt>        </constructor-arg></tt><tt><br>
    </tt><tt>    </bean></tt><tt><br>
    </tt><br>
  </body>
</html>