<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Hello,</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
The following AuthnRequest is causing my IDP to throw a canonicalization error. I'm not sure of the exact reason, but based on the spec, it seems like the SP is populating the NameID element with an incorrect value:</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<blockquote style="border-color: rgb(200, 200, 200); border-left: 3px solid rgb(200, 200, 200); padding-left: 1ex; margin-left: 0.8ex; color: rgb(102, 102, 102);" itemscope="" itemtype="https://schemas.microsoft.com/QuotedText">
<samlp:AuthnRequest xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion"
<div> ...</div>
<div> ></div>
<div> ...</div>
<div> <saml:Subject></div>
<div> <saml:NameID Format="<b>urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified</b>"><b>urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress</b></saml:NameID></div>
<div> <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer" /></div>
<div> </saml:Subject></div>
<span></samlp:AuthnRequest></span><br>
</blockquote>
</div>
<div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
>From my reading of the spec, this element should contain the value the SP expects the IDP to resolve for NameID, so "aplovich@anl.gov" in my case.</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
The spec I'm referencing (pg 49 AuthnRequest, pg 18 Subject): <a href="https://www.oasis-open.org/committees/download.php/35711/sstc-saml-core-errata-2.0-wd-06-diff.pdf" id="LPlnk302064">
https://www.oasis-open.org/committees/download.php/35711/sstc-saml-core-errata-2.0-wd-06-diff.pdf</a><br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Is this a correct assessment, or is there something I'm missing?<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Thanks,<br>
</div>
<div id="Signature">
<div>
<div></div>
<div id="divtagdefaultwrapper" dir="ltr" style="font-size:12pt; color:#000000; font-family:Calibri,Helvetica,sans-serif">
<p style="margin-top:0px; margin-bottom:0px; margin-top:0; margin-bottom:0"><font size="2"><span style="font-size:12pt">Tony Plovich</span><span style="font-size:11pt"><br>
</span><span style="font-size:12pt">Business Information Systems</span><span style="font-size:11pt"><br>
</span><span style="font-size:12pt">Argonne National Laboratory</span><span style="font-size:11pt"></span></font><br>
</p>
</div>
</div>
</div>
</div>
</body>
</html>