<div dir="ltr">Interpreting the quoted vendor's message to mean the vendor is consuming nameID in the subject of your SAML assertion I would try this:<div><br></div><div>(1) Determine what value you can use or gin up for a nameID; might or might not be a valid email address, but the value must be unique and should be persistent and not reassigned. You'll want to know if the service may send email based on the nameID having email-like syntax, which complicates your task of determining a unique persistent value that will also be valid email. eduPersonUniqueId works at my institution because we route ePUID = id#@<a href="http://alaska.edu">alaska.edu</a> to institutional email, but that depends on specific institutional practices.</div><div><br></div><div>In IdP 2,</div><div><br></div><div>(2) define a custom attribute in attribute-resolver.xml with a source attribute value you determined in (1), and an encoder that encodes the attribute as a nameID with the required nameid-format [persistent? emailAddress? - you'd better ask the service]; and</div><div><br></div><div>(3) release that attribute and exclude other nameIDs to the service in attribute-filter.xml</div><div><br></div><div>David Bantz</div><div><br></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Fri, Mar 3, 2017 at 8:31 AM, Stephen Meier <span dir="ltr"><<a href="mailto:stephencm@cos.edu" target="_blank">stephencm@cos.edu</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="m_-7459450326820740929WordSection1">
<p class="MsoNormal">Good Morning, I have shibboleth version 2.4.0<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">I am trying to setup my ID to work with examsoft. The gentleman who I am working with is getting the SAML response from our IDP below.<u></u><u></u></p>
<pre style="margin-right:0in;margin-bottom:6.0pt;margin-left:0in;line-height:14.65pt;background:#fafafa"><span class="m_-7459450326820740929token"><span style="font-family:Menlo;color:#1d75b3">array</span></span><code><span style="font-family:Menlo;color:#373b41"> </span></code><span class="m_-7459450326820740929token"><span style="font-family:Menlo;color:#cc6666">(</span></span><code><span style="font-family:Menlo;color:#373b41"><u></u><u></u></span></code></pre>
<pre style="margin-right:0in;margin-bottom:6.0pt;margin-left:0in;line-height:14.65pt;background:#fafafa"><code><span style="font-family:Menlo;color:#373b41"> </span></code><span class="m_-7459450326820740929token"><span style="font-family:Menlo;color:#1d75b3">'Value'</span></span><code><span style="font-family:Menlo;color:#373b41"> </span></code><span class="m_-7459450326820740929token"><span style="font-family:Menlo;color:#cc6666">=></span></span><code><span style="font-family:Menlo;color:#373b41"> </span></code><span class="m_-7459450326820740929token"><span style="font-family:Menlo;color:#1d75b3">'L0Wz0mhqQUyPzp42n4fJ9w=='</span></span><span class="m_-7459450326820740929token"><span style="font-family:Menlo;color:#cc6666">,</span></span><code><span style="font-family:Menlo;color:#373b41"><u></u><u></u></span></code></pre>
<pre style="margin-right:0in;margin-bottom:6.0pt;margin-left:0in;line-height:14.65pt;background:#fafafa"><code><span style="font-family:Menlo;color:#373b41"> </span></code><span class="m_-7459450326820740929token"><span style="font-family:Menlo;color:#1d75b3">'Format'</span></span><code><span style="font-family:Menlo;color:#373b41"> </span></code><span class="m_-7459450326820740929token"><span style="font-family:Menlo;color:#cc6666">=></span></span><code><span style="font-family:Menlo;color:#373b41"> </span></code><span class="m_-7459450326820740929token"><span style="font-family:Menlo;color:#1d75b3">'urn:oasis:names:tc:SAML:2.0:<wbr>nameid-format:persistent'</span></span><span class="m_-7459450326820740929token"><span style="font-family:Menlo;color:#cc6666">,</span></span><code><span style="font-family:Menlo;color:#373b41"><u></u><u></u></span></code></pre>
<pre style="margin-right:0in;margin-bottom:6.0pt;margin-left:0in;line-height:14.65pt;background:#fafafa"><code><span style="font-family:Menlo;color:#373b41"> </span></code><span class="m_-7459450326820740929token"><span style="font-family:Menlo;color:#1d75b3">'NameQualifier'</span></span><code><span style="font-family:Menlo;color:#373b41"> </span></code><span class="m_-7459450326820740929token"><span style="font-family:Menlo;color:#cc6666">=></span></span><code><span style="font-family:Menlo;color:#373b41"> </span></code><span class="m_-7459450326820740929token"><span style="font-family:Menlo;color:#1d75b3">'<a href="https://shib.cos.edu/idp/shibboleth" target="_blank">https://shib.cos.edu/idp/<wbr>shibboleth</a>'</span></span><span class="m_-7459450326820740929token"><span style="font-family:Menlo;color:#cc6666">,</span></span><code><span style="font-family:Menlo;color:#373b41"><u></u><u></u></span></code></pre>
<pre style="margin-right:0in;margin-bottom:6.0pt;margin-left:0in;line-height:14.65pt;background:#fafafa"><span class="m_-7459450326820740929token"><span style="font-family:Menlo;color:#cc6666">)</span></span><u></u><u></u></pre>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">He says that for his software to work, the ‘Value’ needs to be the email address. I have been changing the attributes.xml, but I am thinking I need to change the ID of the SAML response. I have no idea how to do that.<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Any direction would be helpful.<span class="HOEnZb"><font color="#888888"><u></u><u></u></font></span></p><span class="HOEnZb"><font color="#888888">
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Stephen<u></u><u></u></p>
</font></span></div>
</div>
<br>--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.<wbr>net</a><br></blockquote></div><br></div>