<div dir="ltr"><div dir="ltr">Hi Sunil,<div><br></div><div>I am having the exact same problem.</div><div>The nameid is released to the first relying party but not the second one.</div><div><br></div><div>Best,</div><div><br>Nadim El-Khoury</div><div>Director of Networks, Systems, Infrastructure, and Information Security Officer</div><div>Springfield College</div><div>263 Alden Street</div><div>Springfield, MA 01109</div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Tue, Apr 12, 2022 at 1:35 PM Mathew, Sunil via users <<a href="mailto:users@shibboleth.net">users@shibboleth.net</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div dir="auto">
<div dir="ltr"></div>
<div dir="ltr">To clarify I should specify that name id gets added to the saml response for givitas, but does not get added to the SAML response for smartroom. I am not sure why that does not happen because the setup is identical. </div>
<div dir="ltr"><br>
</div>
<div dir="ltr">Sunil </div>
<div dir="ltr"><br>
</div>
<div dir="ltr"><br>
<blockquote type="cite">On Apr 12, 2022, at 10:01 AM, Mathew, Sunil via users <<a href="mailto:users@shibboleth.net" target="_blank">users@shibboleth.net</a>> wrote:<br>
<br>
</blockquote>
</div>
<blockquote type="cite">
<div dir="ltr">
<div>
<p class="MsoNormal">Hi,<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">I have setup “urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress” name id for multiple vendors using condition.<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">attribute-filter.xml:<u></u><u></u></p>
<p><span><span style="color:black"> </span>
</span><!-- ============================================== --><u></u><u></u></p>
<p><span><span style="color:black"> </span>
</span><!--<span> </span>SmartRoom <span>
</span>--><u></u><u></u></p>
<p><span><span style="color:black"> </span>
</span><!-- ============================================== --><u></u><u></u></p>
<p><span> </span><<b>AttributeFilterPolicy</b>
<span><b>id</b></span>=<span>"SmartRoom"</span>><u></u><u></u></p>
<p><span><span style="color:black">
</span></span><span><<b>PolicyRequirementRule</b> </span><span><b>xsi</b></span><span>:</span><span><b>type</b></span><span>=</span>"Requester"<span>
</span><span><b>value</b></span><span>=</span>"<a href="https://identity-qa2.smartexchange.com" target="_blank">https://identity-qa2.smartexchange.com</a>"<span> /></span><u></u><u></u></p>
<p><u></u> <u></u></p>
<p><span> </span><<b>AttributeRule</b>
<span><b>attributeID</b></span>=<span>"smartroom_name_id"</span>
<span><b>permitAny</b></span>=<span>"true"</span> /><u></u><u></u></p>
<p><u></u> <u></u></p>
<p><span> </span></<b>AttributeFilterPolicy</b>><u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">attribute-resolver.xml:<u></u><u></u></p>
<p><span> </span><!-- ===================START SmartRoom================== --><u></u><u></u></p>
<p><span> </span><<b>AttributeDefinition</b>
<span><b>xsi</b></span>:<span><b>type</b></span>=<span>"Simple"</span>
<span><b>id</b></span>=<span>"smartroom_name_id"</span>><u></u><u></u></p>
<p><span> </span><<b>InputDataConnector</b>
<span><b>ref</b></span>=<span>"zoomProfileDB"</span> <span>
<b>attributeNames</b></span>=<span>"VALUE"</span> /><u></u><u></u></p>
<p><span> </span><span><<b>AttributeEncoder</b>
</span><span><b>xsi</b></span><span>:</span><span><b>type</b></span><span>=</span>"SAML1String"<span>
</span><span><b>name</b></span><span>=</span>"smartroom_name_id"<span>
</span><span><b>encodeType</b></span><span>=</span>"false"<span> /></span><u></u><u></u></p>
<p><span> </span><span><<b>AttributeEncoder</b>
</span><span><b>xsi</b></span><span>:</span><span><b>type</b></span><span>=</span>"SAML2String"<span>
</span><span><b>name</b></span><span>=</span>"smartroom_name_id"<span>
</span><span><b>encodeType</b></span><span>=</span>"false"<span> /></span><u></u><u></u></p>
<p><span> </span></<b>AttributeDefinition</b>><u></u><u></u></p>
<p><span> </span><!-- ===================END SmartRoom==================== --><u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">metadata-providers.xml:<u></u><u></u></p>
<p><span> </span><!-- ============ SmartRoom Setup ========== --><u></u><u></u></p>
<p><span> </span><<b>MetadataProvider</b>
<span><b>id</b></span>=<span>"smartroomMD"</span><u></u><u></u></p>
<p><span> </span><span><b>xsi</b></span><span>:</span><span><b>type</b></span><span>=</span>"FilesystemMetadataProvider"<u></u><u></u></p>
<p><span> </span><span><b>metadataFile</b></span><span>=</span>"%{idp.home}/metadata/smartroom-metadata.xml"<span>/></span><u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">relying-party.xml:<u></u><u></u></p>
<p class="MsoNormal"><span style="font-size:9pt;font-family:Menlo;color:black">
</span><span style="font-size:9pt;font-family:Menlo;color:rgb(63,127,95)"><!-- SmartRoom --><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:9pt;font-family:Menlo;color:black"> <<b>bean</b>
</span><b><span style="font-size:9pt;font-family:Menlo;color:rgb(127,0,85)">parent</span></b><span style="font-size:9pt;font-family:Menlo;color:black">=</span><span style="font-size:9pt;font-family:Menlo;color:rgb(42,0,255)">"RelyingPartyByName"</span><span style="font-size:9pt;font-family:Menlo;color:black">
</span><b><span style="font-size:9pt;font-family:Menlo;color:rgb(127,0,85)">c</span></b><span style="font-size:9pt;font-family:Menlo;color:black">:</span><b><span style="font-size:9pt;font-family:Menlo;color:rgb(127,0,85)">relyingPartyIds</span></b><span style="font-size:9pt;font-family:Menlo;color:black">=</span><span style="font-size:9pt;font-family:Menlo;color:rgb(42,0,255)">"<a href="https://identity-qa2.smartexchange.com" target="_blank">https://identity-qa2.smartexchange.com</a>"</span><span style="font-size:9pt;font-family:Menlo;color:black">></span><span style="font-size:9pt;font-family:Menlo;color:rgb(42,0,255)"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:9pt;font-family:Menlo"> <<b>property</b>
<b><span style="color:rgb(127,0,85)">name</span></b>=<span style="color:rgb(42,0,255)">"profileConfigurations"</span>><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:9pt;font-family:Menlo"> <<b>list</b>><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:9pt;font-family:Menlo"> <<b>bean</b>
<b><span style="color:rgb(127,0,85)">parent</span></b>=<span style="color:rgb(42,0,255)">"SAML2.SSO"</span>><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:9pt;font-family:Menlo"> <<b>property</b>
<b><span style="color:rgb(127,0,85)">name</span></b>=<span style="color:rgb(42,0,255)">"nameIDFormatPrecedence"</span>><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:9pt;font-family:Menlo"> <<b>list</b>><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:9pt;font-family:Menlo;color:black"> <<b>util</b>:</span><b><span style="font-size:9pt;font-family:Menlo;color:rgb(127,0,85)">constant</span></b><span style="font-size:9pt;font-family:Menlo;color:black">
</span><b><span style="font-size:9pt;font-family:Menlo;color:rgb(127,0,85)">static-field</span></b><span style="font-size:9pt;font-family:Menlo;color:black">=</span><span style="font-size:9pt;font-family:Menlo;color:rgb(42,0,255)">"org.opensaml.saml.saml2.core.NameIDType.PERSISTENT"</span><span style="font-size:9pt;font-family:Menlo;color:black">
/></span><span style="font-size:9pt;font-family:Menlo;color:rgb(42,0,255)"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:9pt;font-family:Menlo"> </<b>list</b>><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:9pt;font-family:Menlo"> </<b>property</b>><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:9pt;font-family:Menlo"> <<b>property</b>
<b><span style="color:rgb(127,0,85)">name</span></b>=<span style="color:rgb(42,0,255)">"encryptAssertions"</span>
<b><span style="color:rgb(127,0,85)">value</span></b>=<span style="color:rgb(42,0,255)">"false"</span> /><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:9pt;font-family:Menlo"> <<b>property</b>
<b><span style="color:rgb(127,0,85)">name</span></b>=<span style="color:rgb(42,0,255)">"encryptNameIDs"</span>
<b><span style="color:rgb(127,0,85)">value</span></b>=<span style="color:rgb(42,0,255)">"false"</span> /><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:9pt;font-family:Menlo"> </<b>bean</b>><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:9pt;font-family:Menlo"> </<b>list</b>><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:9pt;font-family:Menlo"> </<b>property</b>><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:9pt;font-family:Menlo"> </<b>bean</b>><u></u><u></u></span></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">saml-nameid.xml:<u></u><u></u></p>
<p class="MsoNormal"><span style="font-size:9pt;font-family:Menlo;color:black">
</span><span style="font-size:9pt;font-family:Menlo;color:rgb(63,127,95)"><!-- Persistent Email address name id --><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:9pt;font-family:Menlo;color:black"> <<b>bean</b>
</span><b><span style="font-size:9pt;font-family:Menlo;color:rgb(127,0,85)">parent</span></b><span style="font-size:9pt;font-family:Menlo;color:black">=</span><span style="font-size:9pt;font-family:Menlo;color:rgb(42,0,255)">"shibboleth.SAML2AttributeSourcedGenerator"<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:9pt;font-family:Menlo;color:black">
</span><b><span style="font-size:9pt;font-family:Menlo;color:rgb(127,0,85)">p</span></b><span style="font-size:9pt;font-family:Menlo;color:black">:</span><b><span style="font-size:9pt;font-family:Menlo;color:rgb(127,0,85)">omitQualifiers</span></b><span style="font-size:9pt;font-family:Menlo;color:black">=</span><span style="font-size:9pt;font-family:Menlo;color:rgb(42,0,255)">"true"</span><span style="font-size:9pt;font-family:Menlo;color:rgb(127,0,85)"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:9pt;font-family:Menlo;color:black">
</span><b><span style="font-size:9pt;font-family:Menlo;color:rgb(127,0,85)">p</span></b><span style="font-size:9pt;font-family:Menlo;color:black">:</span><b><span style="font-size:9pt;font-family:Menlo;color:rgb(127,0,85)">format</span></b><span style="font-size:9pt;font-family:Menlo;color:black">=</span><span style="font-size:9pt;font-family:Menlo;color:rgb(42,0,255)">"urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress"<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:9pt;font-family:Menlo;color:black">
</span><b><span style="font-size:9pt;font-family:Menlo;color:rgb(127,0,85)">p</span></b><span style="font-size:9pt;font-family:Menlo;color:black">:</span><b><span style="font-size:9pt;font-family:Menlo;color:rgb(127,0,85)">attributeSourceIds</span></b><span style="font-size:9pt;font-family:Menlo;color:black">=</span><span style="font-size:9pt;font-family:Menlo;color:rgb(42,0,255)">"#{
{'givitas_name_id', 'smartroom_name_id'} }"<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:9pt;font-family:Menlo;color:black">
</span><b><span style="font-size:9pt;font-family:Menlo;color:rgb(127,0,85)">p</span></b><span style="font-size:9pt;font-family:Menlo;color:black">:</span><b><span style="font-size:9pt;font-family:Menlo;color:rgb(127,0,85)">activationCondition-ref</span></b><span style="font-size:9pt;font-family:Menlo;color:black">=</span><span style="font-size:9pt;font-family:Menlo;color:rgb(42,0,255)">"PersistentEmailAddressCondition"</span><span style="font-size:9pt;font-family:Menlo;color:black">
/></span><span style="font-size:9pt;font-family:Menlo;color:rgb(42,0,255)"><u></u><u></u></span></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">services.xml:<u></u><u></u></p>
<p class="MsoNormal"><span style="font-size:9pt;font-family:Menlo;color:black">
</span><span style="font-size:9pt;font-family:Menlo;color:rgb(63,95,191)"><!-- Persistent Email Address name id --><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:9pt;font-family:Menlo;color:black">
</span><span style="font-size:9pt;font-family:Menlo;color:teal"><</span><span style="font-size:9pt;font-family:Menlo;color:rgb(63,127,127)">bean</span><span style="font-size:9pt;font-family:Menlo;color:black">
</span><span style="font-size:9pt;font-family:Menlo;color:rgb(127,0,127)">id</span><span style="font-size:9pt;font-family:Menlo;color:black">=</span><i><span style="font-size:9pt;font-family:Menlo;color:rgb(42,0,255)">"PersistentEmailAddressCondition"</span></i><span style="font-size:9pt;font-family:Menlo;color:black">
</span><span style="font-size:9pt;font-family:Menlo;color:rgb(127,0,127)">parent</span><span style="font-size:9pt;font-family:Menlo;color:black">=</span><i><span style="font-size:9pt;font-family:Menlo;color:rgb(42,0,255)">"shibboleth.Conditions.OR"</span></i><span style="font-size:9pt;font-family:Menlo;color:teal">></span><span style="font-size:9pt;font-family:Menlo;color:rgb(42,0,255)"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:9pt;font-family:Menlo;color:black">
</span><span style="font-size:9pt;font-family:Menlo;color:teal"><</span><span style="font-size:9pt;font-family:Menlo;color:rgb(63,127,127)">constructor-arg</span><span style="font-size:9pt;font-family:Menlo;color:teal">></span><span style="font-size:9pt;font-family:Menlo;color:rgb(63,127,127)"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:9pt;font-family:Menlo"> <span style="color:teal">
<</span><span style="color:rgb(63,127,127)">list</span><span style="color:teal">></span><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:9pt;font-family:Menlo;color:black">
</span><span style="font-size:9pt;font-family:Menlo;color:teal"><</span><span style="font-size:9pt;font-family:Menlo;color:rgb(63,127,127)">bean</span><span style="font-size:9pt;font-family:Menlo;color:black">
</span><span style="font-size:9pt;font-family:Menlo;color:rgb(127,0,127)">parent</span><span style="font-size:9pt;font-family:Menlo;color:black">=</span><i><span style="font-size:9pt;font-family:Menlo;color:rgb(42,0,255)">"shibboleth.Conditions.RelyingPartyId"</span></i><span style="font-size:9pt;font-family:Menlo;color:black">
</span><span style="font-size:9pt;font-family:Menlo;color:rgb(127,0,127)">c:candidate</span><span style="font-size:9pt;font-family:Menlo;color:black">=</span><i><span style="font-size:9pt;font-family:Menlo;color:rgb(42,0,255)">"<a href="https://givitas.com/sp" target="_blank">https://givitas.com/sp</a>"</span></i><span style="font-size:9pt;font-family:Menlo;color:black">
</span><span style="font-size:9pt;font-family:Menlo;color:teal">/></span><span style="font-size:9pt;font-family:Menlo;color:rgb(42,0,255)"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:9pt;font-family:Menlo;color:black">
</span><span style="font-size:9pt;font-family:Menlo;color:teal"><</span><span style="font-size:9pt;font-family:Menlo;color:rgb(63,127,127)">bean</span><span style="font-size:9pt;font-family:Menlo;color:black">
</span><span style="font-size:9pt;font-family:Menlo;color:rgb(127,0,127)">parent</span><span style="font-size:9pt;font-family:Menlo;color:black">=</span><i><span style="font-size:9pt;font-family:Menlo;color:rgb(42,0,255)">"shibboleth.Conditions.RelyingPartyId"</span></i><span style="font-size:9pt;font-family:Menlo;color:black">
</span><span style="font-size:9pt;font-family:Menlo;color:rgb(127,0,127)">c:candidate</span><span style="font-size:9pt;font-family:Menlo;color:black">=</span><i><span style="font-size:9pt;font-family:Menlo;color:rgb(42,0,255)">"<a href="https://identity-qa2.smartexchange.com" target="_blank">https://identity-qa2.smartexchange.com</a>"</span></i><span style="font-size:9pt;font-family:Menlo;color:black">
</span><span style="font-size:9pt;font-family:Menlo;color:teal">/></span><span style="font-size:9pt;font-family:Menlo;color:rgb(42,0,255)"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:9pt;font-family:Menlo"> <span style="color:teal">
</</span><span style="color:rgb(63,127,127)">list</span><span style="color:teal">></span><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:9pt;font-family:Menlo;color:black">
</span><span style="font-size:9pt;font-family:Menlo;color:teal"></</span><span style="font-size:9pt;font-family:Menlo;color:rgb(63,127,127)">constructor-arg</span><span style="font-size:9pt;font-family:Menlo;color:teal">></span><span style="font-size:9pt;font-family:Menlo;color:rgb(63,127,127)"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:9pt;font-family:Menlo"> <span style="color:teal">
</</span><span style="color:rgb(63,127,127)">bean</span><span style="color:teal">></span><u></u><u></u></span></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Givitas works, but Smart Room does not. I have a similar setup for “urn:oasis:names:tc:SAML:2.0:nameid-format:persistent” name id and they all work. How can I resolve the issue?<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Regards,<br>
Sunil<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<span>-- </span><br>
<span>For Consortium Member technical support, see <a href="https://shibboleth.atlassian.net/wiki/x/ZYEpPw" target="_blank">https://shibboleth.atlassian.net/wiki/x/ZYEpPw</a></span><br>
<span>To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" target="_blank">users-unsubscribe@shibboleth.net</a></span><br>
</div>
</blockquote>
</div>
-- <br>
For Consortium Member technical support, see <a href="https://shibboleth.atlassian.net/wiki/x/ZYEpPw" rel="noreferrer" target="_blank">https://shibboleth.atlassian.net/wiki/x/ZYEpPw</a><br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" target="_blank">users-unsubscribe@shibboleth.net</a><br>
</blockquote></div></div>