<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="color: rgb(0, 0, 0); font-family: "Century Gothic",sans-serif; font-size: 10pt;">
Dear Shibboleth community,</div>
<div style="color: rgb(0, 0, 0); font-family: "Century Gothic",sans-serif; font-size: 10pt;">
I have a vendor requesting to pass the <b>emailAddress</b> in the <b>NameID</b> subject of our SAML response.</div>
<div style="color: rgb(0, 0, 0); font-family: "Century Gothic",sans-serif; font-size: 10pt;">
The user authenticates correctly but right after the browser goes into an infinite redirect.</div>
<div style="color: rgb(0, 0, 0); font-family: "Century Gothic",sans-serif; font-size: 10pt;">
<br>
</div>
<div style="color: rgb(0, 0, 0); font-family: "Century Gothic",sans-serif; font-size: 10pt;">
The log entries show a warning regarding an unsupportable identifier: <br>
</div>
<div style="color: rgb(0, 0, 0); font-family: "Century Gothic",sans-serif; font-size: 10pt;">
<span style="color: rgb(23, 78, 134);">"</span><span style="color: rgb(81, 167, 249);">2019-11-22 15:40:51,583 - 192.148.111.xxx</span><span style="color: rgb(81, 167, 249);">
</span><span style="color: rgb(23, 78, 134);">- <b>WARN</b> [org.opensaml.saml.saml2.profile.impl.AddNameIDToSubjects:337] </span>
<div style="border-bottom-color: currentColor; border-left-color: currentColor; border-right-color: currentColor; border-top-color: currentColor; font-size-adjust: none; margin-bottom: 0px; margin-top: 0px">
<span style="color: rgb(23, 78, 134);">- Profile Action AddNameIDToSubjects: </span></div>
<div style="border-bottom-color: currentColor; border-left-color: currentColor; border-right-color: currentColor; border-top-color: currentColor; font-size-adjust: none; margin-bottom: 0px; margin-top: 0px">
<span style="color: rgb(23, 78, 134);">Request specified use of an unsupportable identifier format: </span></div>
<span style="border-color: currentColor; color: rgb(200, 38, 19); margin-top: 0px; margin-bottom: 0px; font-size-adjust: none;"><b>urn:oasis:names:tc:SAML:2.0:nameid-format:emailAddress</b></span><span style="color: rgb(23, 78, 134); display: inline !important; font-size-adjust: none; background-color: rgb(255, 255, 255);">"</span></div>
<div style="color: rgb(0, 0, 0); font-family: "Century Gothic",sans-serif; font-size: 10pt;">
<br>
</div>
<div style="color: rgb(0, 0, 0); font-family: "Century Gothic",sans-serif; font-size: 10pt;">
The vendor's metadata has this entry:</div>
<div style="color: rgb(0, 0, 0); font-family: "Century Gothic",sans-serif; font-size: 10pt;">
<b><md:NameIDFormat></b><span style="color: rgb(200, 38, 19);">urn:oasis:names:tc:</span><span style="color: rgb(200, 38, 19);"><b>SAML:2.0</b></span><span style="color: rgb(200, 38, 19);">:nameid-format:</span><b><span style="color: rgb(200, 38, 19);">emailAddress</span></md:NameIDFormat></b><br>
</div>
<div style="color: rgb(0, 0, 0); font-family: "Century Gothic",sans-serif; font-size: 10pt;">
<b></b><br>
</div>
<div style="color: rgb(0, 0, 0); font-family: "Century Gothic",sans-serif; font-size: 10pt;">
I suspect the vendor's metadata is referencing the wrong NameIDFormat in his metadata. I am thinking it should be this:</div>
<div style="color: rgb(0, 0, 0); font-family: "Century Gothic",sans-serif; font-size: 10pt;">
<span style="color: rgb(15, 92, 26);">urn:oasis:names:tc:<b>SAML:1.1</b>:nameid-format:emailAddress</span></div>
<div style="color: rgb(0, 0, 0); font-family: "Century Gothic",sans-serif; font-size: 10pt;">
<br>
</div>
<div style="color: rgb(0, 0, 0); font-family: "Century Gothic",sans-serif; font-size: 10pt;">
since that's the format stated in the <span style="color: rgb(12, 100, 192);"><b>saml-nameid.xml
</b></span>config file of the Shibboleth IdP 3.4.6</div>
<div style="color: rgb(0, 0, 0); font-family: "Century Gothic",sans-serif; font-size: 10pt;">
<br>
</div>
<div style="color: rgb(0, 0, 0); font-family: "Century Gothic",sans-serif; font-size: 10pt;">
Can someone confirm that this is the cause of the problem?</div>
<div style="color: rgb(0, 0, 0); font-family: "Century Gothic",sans-serif; font-size: 10pt;">
<br>
</div>
<div style="color: rgb(0, 0, 0); font-family: "Century Gothic",sans-serif; font-size: 10pt;">
Thanks!</div>
<div style="color: rgb(0, 0, 0); font-family: "Century Gothic",sans-serif; font-size: 10pt;">
<br>
</div>
<div style="color: rgb(0, 0, 0); font-family: "Century Gothic",sans-serif; font-size: 10pt;">
<br>
</div>
<div id="Signature">
<div id="divtagdefaultwrapper" style="color:rgb(0,0,0); font-family:Century Gothic; font-size:10pt; background-color:rgb(255,255,255)" dir="ltr">
<div style="font-family:Tahoma; font-size:13px">
<div><span style="color:rgb(117,123,128)"><strong>~Alan Angulo</strong></span></div>
<p style="margin-top: 0px; margin-bottom: 0px;"><span style="color:rgb(117,123,128); background-color:rgb(255,255,255)">Senior Systems Administrator / Office 365 Administrator</span></p>
<p style="margin-top: 0px; margin-bottom: 0px;"><span style="color:rgb(255,255,255); background-color:rgb(102,102,102)">East Stroudsburg University | 570-422-3783 | alan@esu.edu | alan@live.esu.edu</span></p>
<div style="font-family:Tahoma; font-size:13px"><span style="font-family:Tahoma,Geneva,sans-serif; font-size:10pt"></span></div>
</div>
</div>
</div>
</body>
</html>