<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
@font-face
{font-family:Menlo;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
code
{mso-style-priority:99;
font-family:"Courier New";}
pre
{mso-style-priority:99;
mso-style-link:"HTML Preformatted Char";
margin:0in;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New";}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
span.HTMLPreformattedChar
{mso-style-name:"HTML Preformatted Char";
mso-style-priority:99;
mso-style-link:"HTML Preformatted";
font-family:Consolas;}
span.m-7459450326820740929token
{mso-style-name:m_-7459450326820740929token;}
span.hoenzb
{mso-style-name:hoenzb;}
span.EmailStyle23
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Thanks for the information. I will look into getting our IDP upgraded.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">From:</span></b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> users [mailto:users-bounces@shibboleth.net]
<b>On Behalf Of </b>IAM David Bantz<br>
<b>Sent:</b> Friday, March 3, 2017 10:52 AM<br>
<b>To:</b> Shib Users <users@shibboleth.net><br>
<b>Subject:</b> Re: Change the ID in the Saml response<o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal">Interpreting the quoted vendor's message to mean the vendor is consuming nameID in the subject of your SAML assertion I would try this:<o:p></o:p></p>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">(1) Determine what value you can use or gin up for a nameID; might or might not be a valid email address, but the value must be unique and should be persistent and not reassigned. You'll want to know if the service may send email based
on the nameID having email-like syntax, which complicates your task of determining a unique persistent value that will also be valid email. eduPersonUniqueId works at my institution because we route ePUID = id#@<a href="http://alaska.edu">alaska.edu</a> to
institutional email, but that depends on specific institutional practices.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">In IdP 2,<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">(2) define a custom attribute in attribute-resolver.xml with a source attribute value you determined in (1), and an encoder that encodes the attribute as a nameID with the required nameid-format [persistent? emailAddress? - you'd better
ask the service]; and<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">(3) release that attribute and exclude other nameIDs to the service in attribute-filter.xml<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">David Bantz<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal">On Fri, Mar 3, 2017 at 8:31 AM, Stephen Meier <<a href="mailto:stephencm@cos.edu" target="_blank">stephencm@cos.edu</a>> wrote:<o:p></o:p></p>
<blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in">
<div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">Good Morning, I have shibboleth version 2.4.0<o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">I am trying to setup my ID to work with examsoft. The gentleman who I am working with is getting the SAML response from our IDP below.<o:p></o:p></p>
<pre style="margin-bottom:6.0pt;line-height:14.65pt;background:#FAFAFA"><span class="m-7459450326820740929token"><span style="font-family:Menlo;color:#1D75B3">array</span></span><code><span style="font-family:Menlo;color:#373B41"> </span></code><span class="m-7459450326820740929token"><span style="font-family:Menlo;color:#CC6666">(</span></span><o:p></o:p></pre>
<pre style="margin-bottom:6.0pt;line-height:14.65pt;background:#FAFAFA"><code><span style="font-family:Menlo;color:#373B41"> </span></code><span class="m-7459450326820740929token"><span style="font-family:Menlo;color:#1D75B3">'Value'</span></span><code><span style="font-family:Menlo;color:#373B41"> </span></code><span class="m-7459450326820740929token"><span style="font-family:Menlo;color:#CC6666">=></span></span><code><span style="font-family:Menlo;color:#373B41"> </span></code><span class="m-7459450326820740929token"><span style="font-family:Menlo;color:#1D75B3">'L0Wz0mhqQUyPzp42n4fJ9w=='</span></span><span class="m-7459450326820740929token"><span style="font-family:Menlo;color:#CC6666">,</span></span><o:p></o:p></pre>
<pre style="margin-bottom:6.0pt;line-height:14.65pt;background:#FAFAFA"><code><span style="font-family:Menlo;color:#373B41"> </span></code><span class="m-7459450326820740929token"><span style="font-family:Menlo;color:#1D75B3">'Format'</span></span><code><span style="font-family:Menlo;color:#373B41"> </span></code><span class="m-7459450326820740929token"><span style="font-family:Menlo;color:#CC6666">=></span></span><code><span style="font-family:Menlo;color:#373B41"> </span></code><span class="m-7459450326820740929token"><span style="font-family:Menlo;color:#1D75B3">'urn:oasis:names:tc:SAML:2.0:nameid-format:persistent'</span></span><span class="m-7459450326820740929token"><span style="font-family:Menlo;color:#CC6666">,</span></span><o:p></o:p></pre>
<pre style="margin-bottom:6.0pt;line-height:14.65pt;background:#FAFAFA"><code><span style="font-family:Menlo;color:#373B41"> </span></code><span class="m-7459450326820740929token"><span style="font-family:Menlo;color:#1D75B3">'NameQualifier'</span></span><code><span style="font-family:Menlo;color:#373B41"> </span></code><span class="m-7459450326820740929token"><span style="font-family:Menlo;color:#CC6666">=></span></span><code><span style="font-family:Menlo;color:#373B41"> </span></code><span class="m-7459450326820740929token"><span style="font-family:Menlo;color:#1D75B3">'<a href="https://shib.cos.edu/idp/shibboleth" target="_blank">https://shib.cos.edu/idp/shibboleth</a>'</span></span><span class="m-7459450326820740929token"><span style="font-family:Menlo;color:#CC6666">,</span></span><o:p></o:p></pre>
<pre style="margin-bottom:6.0pt;line-height:14.65pt;background:#FAFAFA"><span class="m-7459450326820740929token"><span style="font-family:Menlo;color:#CC6666">)</span></span><o:p></o:p></pre>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">He says that for his software to work, the ‘Value’ needs to be the email address. I have been changing the attributes.xml, but I am thinking I need to change the ID of the SAML
response. I have no idea how to do that.<o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">Any direction would be helpful.<o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="color:#888888"> <o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="color:#888888">Stephen<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">
users-unsubscribe@shibboleth.net</a><o:p></o:p></p>
</blockquote>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</div>
</body>
</html>