<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Menlo;
panose-1:2 11 6 9 3 8 4 2 2 4;}
@font-face
{font-family:"Ubuntu Mono";
panose-1:2 11 5 9 3 6 2 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:10.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
p.p1, li.p1, div.p1
{mso-style-name:p1;
margin:0in;
font-size:9.0pt;
font-family:Menlo;
color:#2A00FF;}
p.p2, li.p2, div.p2
{mso-style-name:p2;
margin:0in;
font-size:9.0pt;
font-family:Menlo;
color:#7F0055;}
span.s1
{mso-style-name:s1;
color:black;}
span.s2
{mso-style-name:s2;
color:#7F0055;}
span.s3
{mso-style-name:s3;
color:#2A00FF;}
span.apple-converted-space
{mso-style-name:apple-converted-space;}
span.EmailStyle25
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style>
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt">I guess I could use the following: https://shibboleth.atlassian.net/wiki/spaces/IDP4/pages/1265631672/CustomNameIDGenerationConfiguration#Dealing-with-Conflicting-Requirements<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Ubuntu Mono";color:#172B4D;background:#F4F5F7"> <</span><span style="font-size:10.5pt;font-family:"Ubuntu Mono";color:#067384;background:#F4F5F7">property name</span><span style="font-size:10.5pt;font-family:"Ubuntu Mono";color:#172B4D;background:#F4F5F7">="</span><span style="font-size:10.5pt;font-family:"Ubuntu Mono";color:#067384;background:#F4F5F7">activationCondition</span><span style="font-size:10.5pt;font-family:"Ubuntu Mono";color:#172B4D;background:#F4F5F7">"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Ubuntu Mono";color:#505F79;background:#F4F5F7">11</span><span style="font-size:10.5pt;font-family:"Ubuntu Mono";color:#172B4D;background:#F4F5F7"> <</span><span style="font-size:10.5pt;font-family:"Ubuntu Mono";color:#067384;background:#F4F5F7">bean
parent</span><span style="font-size:10.5pt;font-family:"Ubuntu Mono";color:#172B4D;background:#F4F5F7">="</span><span style="font-size:10.5pt;font-family:"Ubuntu Mono";color:#067384;background:#F4F5F7">shibboleth.Conditions.RelyingPartyId</span><span style="font-size:10.5pt;font-family:"Ubuntu Mono";color:#172B4D;background:#F4F5F7">"</span><span style="font-size:10.5pt;font-family:"Ubuntu Mono";color:#067384;background:#F4F5F7">
c:candidate</span><span style="font-size:10.5pt;font-family:"Ubuntu Mono";color:#172B4D;background:#F4F5F7">="</span><span style="font-size:10.5pt;font-family:"Ubuntu Mono";color:#067384;background:#F4F5F7">https://sp.example.com/shibboleth</span><span style="font-size:10.5pt;font-family:"Ubuntu Mono";color:#172B4D;background:#F4F5F7">"</span><span style="font-size:10.5pt;font-family:"Ubuntu Mono";color:#067384;background:#F4F5F7">
</span><span style="font-size:10.5pt;font-family:"Ubuntu Mono";color:#172B4D;background:#F4F5F7">/><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Ubuntu Mono";color:#505F79;background:#F4F5F7">12</span><span style="font-size:10.5pt;font-family:"Ubuntu Mono";color:#172B4D;background:#F4F5F7"> </</span><span style="font-size:10.5pt;font-family:"Ubuntu Mono";color:#067384;background:#F4F5F7">property</span><span style="font-size:10.5pt;font-family:"Ubuntu Mono";color:#172B4D;background:#F4F5F7">></span><span style="font-size:11.0pt"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Sunil<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal" style="margin-bottom:12.0pt"><b><span style="font-size:12.0pt;color:black">From:
</span></b><span style="font-size:12.0pt;color:black">users <users-bounces@shibboleth.net> on behalf of Mathew, Sunil via users <users@shibboleth.net><br>
<b>Date: </b>Friday, March 18, 2022 at 12:58 PM<br>
<b>To: </b>Cantor, Scott <cantor.2@osu.edu>, Shib Users <users@shibboleth.net><br>
<b>Cc: </b>Mathew, Sunil <smathew@hbs.edu><br>
<b>Subject: </b>Re: IDP 4.1.5 Nameid <o:p></o:p></span></p>
</div>
<p class="MsoNormal"><span style="font-size:11.0pt">Thanks Scott.</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt">I followed the example here: <a href="https://nam04.safelinks.protection.outlook.com/?url=http%3A%2F%2Fshibboleth.net%2Fpipermail%2Fusers%2F2021-January%2F048839.html&data=04%7C01%7Csmathew%40hbs.edu%7Cdcdb0dbbd16448d6572908da0900639b%7C09fd564ebf4243218f2db8e482f8635c%7C0%7C0%7C637832194981059785%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=%2FT16I6Rr2b%2F2ArEd%2FEGnHZPRZ%2F1TwovZ6uIhj1inuEA%3D&reserved=0">
http://shibboleth.net/pipermail/users/2021-January/048839.html</a> and I modified saml-nameid.xml to the following:</span><o:p></o:p></p>
<p class="p1"><span class="apple-converted-space"><span style="color:black">
</span></span><span class="s1"><<b>bean</b> </span><span class="s2"><b>parent</b></span><span class="s1">=</span>"shibboleth.SAML2AttributeSourcedGenerator"<o:p></o:p></p>
<p class="p2"><span class="apple-converted-space"><span style="color:black">
</span></span><b>p</b><span class="s1">:</span><b>omitQualifiers</b><span class="s1">=</span><span class="s3">"true"</span><o:p></o:p></p>
<p class="p1"><span class="apple-converted-space"><span style="color:black">
</span></span><span class="s2"><b>p</b></span><span class="s1">:</span><span class="s2"><b>format</b></span><span class="s1">=</span>"urn:oasis:names:tc:SAML:2.0:nameid-format:persistent"<o:p></o:p></p>
<p class="p1"><span class="apple-converted-space"><span style="color:black">
</span></span><span class="s2"><b>p</b></span><span class="s1">:</span><span class="s2"><b>attributeSourceIds</b></span><span class="s1">=</span>"#{ {'canvas_name_id'} }"<span class="s1"> /></span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt">and atttibute-resolver.xml to the following:</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Menlo;color:black"> <<b>AttributeDefinition</b>
</span><b><span style="font-size:9.0pt;font-family:Menlo;color:#7F0055">xsi</span></b><span style="font-size:9.0pt;font-family:Menlo;color:black">:</span><b><span style="font-size:9.0pt;font-family:Menlo;color:#7F0055">type</span></b><span style="font-size:9.0pt;font-family:Menlo;color:black">=</span><span style="font-size:9.0pt;font-family:Menlo;color:#2A00FF">"PrincipalName"</span><span style="font-size:9.0pt;font-family:Menlo;color:black">
</span><b><span style="font-size:9.0pt;font-family:Menlo;color:#7F0055">id</span></b><span style="font-size:9.0pt;font-family:Menlo;color:black">=</span><span style="font-size:9.0pt;font-family:Menlo;color:#2A00FF">"canvas_name_id"</span><span style="font-size:9.0pt;font-family:Menlo;color:black">></span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Menlo;color:black"> <<b>AttributeEncoder</b>
</span><b><span style="font-size:9.0pt;font-family:Menlo;color:#7F0055">xsi</span></b><span style="font-size:9.0pt;font-family:Menlo;color:black">:</span><b><span style="font-size:9.0pt;font-family:Menlo;color:#7F0055">type</span></b><span style="font-size:9.0pt;font-family:Menlo;color:black">=</span><span style="font-size:9.0pt;font-family:Menlo;color:#2A00FF">"SAML1String"</span><span style="font-size:9.0pt;font-family:Menlo;color:black">
</span><b><span style="font-size:9.0pt;font-family:Menlo;color:#7F0055">name</span></b><span style="font-size:9.0pt;font-family:Menlo;color:black">=</span><span style="font-size:9.0pt;font-family:Menlo;color:#2A00FF">"canvas_name_id"</span><span style="font-size:9.0pt;font-family:Menlo;color:black">
</span><b><span style="font-size:9.0pt;font-family:Menlo;color:#7F0055">encodeType</span></b><span style="font-size:9.0pt;font-family:Menlo;color:black">=</span><span style="font-size:9.0pt;font-family:Menlo;color:#2A00FF">"false"</span><span style="font-size:9.0pt;font-family:Menlo;color:black">
/></span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Menlo;color:black"> <<b>AttributeEncoder</b>
</span><b><span style="font-size:9.0pt;font-family:Menlo;color:#7F0055">xsi</span></b><span style="font-size:9.0pt;font-family:Menlo;color:black">:</span><b><span style="font-size:9.0pt;font-family:Menlo;color:#7F0055">type</span></b><span style="font-size:9.0pt;font-family:Menlo;color:black">=</span><span style="font-size:9.0pt;font-family:Menlo;color:#2A00FF">"SAML2String"</span><span style="font-size:9.0pt;font-family:Menlo;color:black">
</span><b><span style="font-size:9.0pt;font-family:Menlo;color:#7F0055">name</span></b><span style="font-size:9.0pt;font-family:Menlo;color:black">=</span><span style="font-size:9.0pt;font-family:Menlo;color:#2A00FF">"canvas_name_id"</span><span style="font-size:9.0pt;font-family:Menlo;color:black">
</span><b><span style="font-size:9.0pt;font-family:Menlo;color:#7F0055">encodeType</span></b><span style="font-size:9.0pt;font-family:Menlo;color:black">=</span><span style="font-size:9.0pt;font-family:Menlo;color:#2A00FF">"false"</span><span style="font-size:9.0pt;font-family:Menlo;color:black">
/></span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Menlo"> </<b>AttributeDefinition</b>></span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Does that mean if I have to define nameids for each SP, I will have to configure separate SAML2AttributeSourcedGenerator in saml-nameid.xml?</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Regards,<br>
Sunil</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> </span><o:p></o:p></p>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal" style="margin-bottom:12.0pt"><b><span style="font-size:12.0pt;color:black">From:
</span></b><span style="font-size:12.0pt;color:black">Cantor, Scott <cantor.2@osu.edu><br>
<b>Date: </b>Friday, March 18, 2022 at 10:54 AM<br>
<b>To: </b>Shib Users <users@shibboleth.net><br>
<b>Cc: </b>Mathew, Sunil <smathew@hbs.edu><br>
<b>Subject: </b>Re: IDP 4.1.5 Nameid </span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span style="font-size:11.0pt">There is no "legacy" feature to document, it was removed, that's why it causes warnings in the later 3.x releases. The documentation on NameID Generation is very prominent in the
wiki (that's what it's called). It worked in 3.x largely the same way.<br>
<br>
-- Scott<br>
<br>
<br>
</span><o:p></o:p></p>
</div>
</div>
</body>
</html>