<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
We are passing the same thing, except our is some strange munged version of our identifier that we had to put in so that Okta/Adobe could use an identifier other than email. It was a "does not compute" moment when we told them that email is not a permanent
identifier for us (and most likely all other education tenants).</div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
We have a ticket in with their support because while the IdP tests fine, the NameID is this long userid@some-really-long-okta-guid-looking-this.com format that we suspect will break Adobe if we pass it along.</div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div id="Signature">
<div>
<div></div>
<div></div>
<div></div>
<div></div>
<div id="divtagdefaultwrapper" dir="ltr" style="font-size:12pt; color:#000000; font-family:Calibri,Helvetica,sans-serif">
<div dir="ltr" style="font-size:12pt; color:#000000; background-color:#FFFFFF; font-family:Calibri,Arial,Helvetica,sans-serif">
<div name="divtagdefaultwrapper" style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:; margin:0">
<div>
<div style="font-size:13px; font-family:Tahoma"><font size="2" face="Tahoma">
<div>
<div>
<p style="font-family:Arial,Helvetica,sans-serif; margin:0; line-height:1.2; color:#002a5c; font-size:16px; font-weight:900">
Mark McCoy</p>
<p style="font-family:Arial,Helvetica,sans-serif; margin:0; font-size:15px">Manager, Enterprise Collaboration Services<br>
</p>
<br>
<p style="font-family:Arial,Helvetica,sans-serif; margin:0; color:#f15a22; font-size:15px; font-weight:900">
The University of Texas at San Antonio</p>
<p style="font-family:Arial,Helvetica,sans-serif; margin:0; font-size:15px">University Technology Solutions<br>
</p>
<p style="font-family:Arial,Helvetica,sans-serif; margin:0; font-size:15px">One UTSA Circle</p>
<p style="font-family:Arial,Helvetica,sans-serif; margin:0; font-size:15px">San Antonio, TX 78249-3209</p>
<p style="font-family:Arial,Helvetica,sans-serif; margin:0; font-size:15px"><strong></strong>210.458.5871</p>
</div>
</div>
</font></div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<div id="appendonsend"></div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> users <users-bounces@shibboleth.net> on behalf of Cantor, Scott <cantor.2@osu.edu><br>
<b>Sent:</b> Thursday, September 3, 2020 11:51<br>
<b>To:</b> Shib Users <users@shibboleth.net><br>
<b>Subject:</b> [EXTERNAL] Re: Notice from Adobe about IdP SHA-1 certificates</font>
<div> </div>
</div>
<div class="BodyFragment"><font size="2"><span style="font-size:11pt;">
<div class="PlainText"> **EXTERNAL EMAIL**<br>
This email originated outside of The University of Texas at San Antonio.<br>
Please exercise caution when clicking on links or opening attachments.<br>
<br>
<br>
<br>
On 9/3/20, 12:47 PM, "Donald Lohr" <lohrda@jmu.edu> wrote:<br>
<br>
> What are others passing?<br>
<br>
A NameID containing one of our internal identifiers via a custom NameID Format, which is the critical part matching our directory sync to their system, and standard versions of givenName, sn, and mail that I suspect are unused.<br>
<br>
-- Scott<br>
<br>
<br>
--<br>
For Consortium Member technical support, see <a href="https://nam11.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwiki.shibboleth.net%2Fconfluence%2Fx%2FcoFAAg&data=02%7C01%7Cmark.mccoy%40utsa.edu%7C716ff27978d143667b9508d85029b895%7C3a228dfbc64744cb88357b20617fc906%7C0%7C0%7C637347487415217290&sdata=pOTXIEJ%2FCI0KviG6RvP1ymoLduKAEgVh86YYhwD0HOU%3D&reserved=0">
https://nam11.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwiki.shibboleth.net%2Fconfluence%2Fx%2FcoFAAg&data=02%7C01%7Cmark.mccoy%40utsa.edu%7C716ff27978d143667b9508d85029b895%7C3a228dfbc64744cb88357b20617fc906%7C0%7C0%7C637347487415217290&sdata=pOTXIEJ%2FCI0KviG6RvP1ymoLduKAEgVh86YYhwD0HOU%3D&reserved=0</a><br>
To unsubscribe from this list send an email to users-unsubscribe@shibboleth.net<br>
</div>
</span></font></div>
</body>
</html>