<div dir="ltr">The helpful Shibb wiki page <a href="https://wiki.shibboleth.net/confluence/pages/editpage.action?pageId=24773323">Google Apps for Education</a> indicates Google needs nameID formatted as email:<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><span style="color:rgb(0,0,0)"><font face="tahoma, sans-serif">"urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress"</font></span></blockquote><div>but in my first attempt to integrate a "proof of concept" GAE domain, the incoming SAML request has</div>





<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><font face="tahoma, sans-serif"><span class="gmail-Apple-converted-space" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)"> </span><span style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)"><samlp:NameIDPolicy AllowCreate="true" Format=</span></font> </blockquote><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><font face="tahoma, sans-serif"><span style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">"urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified"/></span> </font></blockquote><div><br></div><div>What does experience indicate is correct? Or is this an example of SC's experience that vendors may claim to need a specific format, but really do not?</div><div><br></div><div><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">That page also indicates using configuring no encryption in relying-party.xml. Isn't that redundant if there is no certificate in metadata? </span></div><div><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures"><br></span></div><div><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">David Bantz</span></div><div><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">UA OIT IAM</span></div><div><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures"><br></span></div><div><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures"><br></span></div></div>