<div dir="ltr">If I interpret correctly you took a relying party config and pasted it into the resolver.<div>Don't do that.</div><div><br></div><div>Treat the release of nameid with nameid-format:unspecified exactly as you did the one with nameid-format:<span style="font-size:12.8px">emailAddress</span></div><div><span style="font-size:12.8px"><br></span></div><div><span style="font-size:12.8px">In fact it appears these have exactly the same values, so you only need one SAML attribute from the resolver, used as the source for nameids in either 'unspecified' or emalAddress format for different SPs. No need to resolve the same value into two different SAML attributes.</span></div><div><span style="font-size:12.8px"><br></span></div><div><span style="font-size:12.8px">David Bantz</span></div><div><span style="font-size:12.8px">UA OIT IAM</span></div><div><div><br></div></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Wed, Feb 22, 2017 at 1:19 PM, Ramaiah, Vanna G. <span dir="ltr"><<a href="mailto:ramaiah@musc.edu" target="_blank">ramaiah@musc.edu</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">This is the error I get. I commented out the relying party config of SP xyz from v2 and added this below code. Should this be placed in other bean?<br>
<span class=""><bean parent="RelyingPartyByName"<br>
c:relyingPartyIds="#{{XYZ'}}"><br>
<br>
<property name="profileConfigurations"><br>
<list><br>
</span> <bean parent="SAML2.SSO.custom" p:signAssertions="true" p:encryptAssertions="false" p:nameIDFormatPrecedence="urn:<wbr>oasis:names:tc:SAML:1.1:<wbr>nameid-format:unspecified" /><br>
</list><br>
</property><br>
</bean><br>
2017-02-22 17:11:39,181 - ERROR [net.shibboleth.utilities.<wbr>java.support.service.<wbr>AbstractReloadableService:181] - Service 'shibboleth.<wbr>RelyingPartyResolverService': Initial load failed<br>
net.shibboleth.utilities.java.<wbr>support.service.<wbr>ServiceException: org.springframework.beans.<wbr>factory.xml.<wbr>XmlBeanDefinitionStoreExceptio<wbr>n: Line 298 in XML document from file [/opt/shibboleth-idp/conf/<wbr>relying-party.xml] is invalid; nested exception is org.xml.sax.SAXParseException; lineNumber: 298; columnNumber: 85; The prefix "c" for attribute "c:relyingPartyIds" associated with an element type "bean" is not bound.<br>
<span class="im HOEnZb"><br>
<br>
-----Original Message-----<br>
From: users [mailto:<a href="mailto:users-bounces@shibboleth.net">users-bounces@<wbr>shibboleth.net</a>] On Behalf Of Cantor, Scott<br>
</span><span class="im HOEnZb">Sent: Wednesday, February 22, 2017 4:48 PM<br>
To: Shib Users <<a href="mailto:users@shibboleth.net">users@shibboleth.net</a>><br>
Subject: Re: v3.2 - unsupportable identifier -Name ID<br>
<br>
<br>
<br>
</span><div class="HOEnZb"><div class="h5">On 2/22/17, 4:31 PM, "users on behalf of Ramaiah, Vanna G." <<a href="mailto:users-bounces@shibboleth.net">users-bounces@shibboleth.net</a> on behalf of <a href="mailto:ramaiah@musc.edu">ramaiah@musc.edu</a>> wrote:<br>
<br>
> 3.In metadata of xyz,<br>
> <md:NameIDFormat>urn:oasis:<wbr>names:tc:SAML:1.1:nameid-<wbr>format:unspecified</md:<wbr>NameIDFormat><br>
<br>
The documentation tells you explicitly that that doesn't work.<br>
<br>
> 4. I copy pasted the relying-party.xml from V2.4 to V3.2. where should the below segment go?<br>
<br>
I can't tell you how to structure your relying party rules, but the settings are fine.<br>
<br>
> 5. Should I add anything to saml-nameid.xml?<br>
<br>
The same thing you would add for any custom format. There is no difference here except for the fact that you can't trigger it with metadata.<br>
<br>
-- Scott<br>
<br>
<br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.<wbr>net</a><br>
<br>
<br>
<br>
<br>
<br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.<wbr>net</a><br>
</div></div></blockquote></div><br></div>