<div dir="ltr"><div><span>Thanks Scott...</span></div><div><br></div><div><span>I tried both but did not work (basically no section visible in SAML response for 'NameID' in subject)</span></div><div><br></div><div><span>basically below is what I did, in addition, uid is defined in resolver and will certainly have a value part of resolution.</span></div><div><br></div><div><span>In saml-nameid.xml</span></div><div><br></div><div><span>.......</span></div><div><span>.......</span><br></div><div><br></div><div><span> <!-- SAML 2 NameID Generation --></span><br><span> <util:list id="shibboleth.SAML2NameIDGenerators"></span></div><div><span> <ref bean="shibboleth.SAML2TransientGenerator" /></span></div><div><span> <!-- Uncommenting this bean requires configuration in saml-nameid.properties. --></span><br><span> <ref bean="shibboleth.SAML2PersistentGenerator" /></span></div><div><span> <bean parent="shibboleth.SAML2AttributeSourcedGenerator"</span><br><span> p:format="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified"</span><br><span> p:<span class="gmail-bold gmail-highlight gmail-search-highlight">useUnfilteredAttributes</span>="%{idp.persistentId.<span class="gmail-bold gmail-highlight gmail-search-highlight">useUnfilteredAttributes</span>:true}"</span><br><span> p:attributeSourceIds="#{ {'uid'} }"></span><br><span> <property name="activationCondition"></span><br><span> <bean parent="shibboleth.Conditions.RelyingPartyId" c:candidates="#'</span><a href="https://mysamplesitesp.com/" rel="nofollow"><font color="#0066cc">https://mysamplesitesp.com</font></a><span>'}}" /></span><br><span> </property></span><br><span> </bean></span></div><div><br></div><div><span>..........</span></div><div><br></div><div><span>and in replyingparty.xml</span></div><div><br></div><div><span> <util:list id="shibboleth.RelyingPartyOverrides"></span></div><div><br></div><div><br><span><bean parent="RelyingPartyByName" c:relyingPartyIds="</span><a href="https://mysamplesitesp.com/" rel="nofollow"><font color="#0066cc">https://mysamplesitesp.com</font></a><span>"></span><br><span> <property name="profileConfigurations"></span><br><span> <list></span></div><div><span> <bean parent="SAML2.SSO" p:encryptAssertions="false" p:signAssertions="true" p:signResponses="false" p:nameIDFormatPrecedence="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified" /></span></div><div><span> </list></span><br><span> </property></span><br><span> </bean></span></div><div><span> </util:list></span><br></div><div><br></div><div><br></div><div><br></div><div><span>basically need is to see similar below.NameID section in response... but not successful so far basically I see no NameID section at all for above config.</span></div><div><br></div><pre id="gmail-txt"><span> <saml2:Subject>
<saml2:NameID Format="</span><strong><span>urn:oasis:names:tc:SAML:2.0:nameid-format:unspecified</span></strong><span>"
NameQualifier="</span><a href="https://myidp.x.x/idp/shibboleth" rel="nofollow"><font color="#0066cc">https://myidp.x.x/idp/shibboleth</font></a><span>"
></span><strong><span>5054433444</span></strong><span></saml2:NameID>
<saml2:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
<saml2:SubjectConfirmationData Address="10.48.1.45"
InResponseTo="samlrequest_7e3b387729854d408fa10de622889738"
NotOnOrAfter="2017-04-10T04:30:30.777Z"
Recipient="</span><a href="https://x.y./sample/login/" rel="nofollow"><font color="#0066cc">https://x.y./sample/login/</font></a><span>"
/>
</saml2:SubjectConfirmation>
</saml2:Subject></span></pre><p><br></p><div><br></div><div><span>Let me know where exactly the missing config required.</span></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Mon, Apr 10, 2017 at 2:28 AM, Cantor, Scott <span dir="ltr"><<a href="mailto:cantor.2@osu.edu" target="_blank">cantor.2@osu.edu</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span>On 4/7/17, 10:17 PM, "users on behalf of Lalith Jayaweera" <<a href="mailto:users-bounces@shibboleth.net">users-bounces@shibboleth.net</a> on behalf of <a href="mailto:ljayaweera@gmail.com">ljayaweera@gmail.com</a>> wrote:<br>
<br>
> Just to clarify, what do you meant by 'You'd have to release uid to that SP' ?<br>
<br>
</span>Release the uid attribute to the SP.<br>
<span><br>
> Does not require anything in attribute section....<br>
<br>
</span>Then you'll have to change the generator as the documentation mentions to pull from the unfiltered attribute set.<br>
<span><br>
> or also do we have examples on how to configure the generator to achieve it?<br>
<br>
</span>"The process above requires that you explicitly release the attribute to use as a source in your filter policy. If you wish, you can avoid this step by using a generator property (useUnfilteredAttributes) that allows an unreleased attribute to be used as a source, but note that doing so creates a sort of "pseudo-policy" exposing information to an SP outside of the normal filtering process."<br>
<span class="HOEnZb"><font color="#888888"><br>
-- Scott<br>
<br>
<br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.<wbr>net</a><br>
</font></span></blockquote></div><br></div>