<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof">
Hi,</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof">
As stated in the subject I have just attempted to upgrade one of our dev Shibb IDP servers, however I now get the following in idp-warn.log:</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof">
2022-06-20 15:05:20,191 - WARN [org.opensaml.saml.saml2.profile.impl.AddNameIDToSubjects:334] [152.78.128.111] - Profile Action AddNameIDToSubjects: Request specified use of an unsupportable identifier format: urn:oasis:names:tc:SAML:2.0:nameid-format:persistent
<div>2022-06-20 15:05:20,192 - WARN [org.opensaml.profile.action.impl.LogEvent:101] [152.78.128.111] - A non-proceed event occurred while processing the request: InvalidNameIDPolicy</div>
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof">
aacli shows the following NameID generation</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof">
/srv/shibboleth-idp/bin/aacli.sh -n nmp1u14 -r https://play01982.soton.ac.uk/shibboleth --saml2
<div><?xml version="1.0" encoding="UTF-8"?><saml2:Assertion xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion" ID="_ae104b1b0dd1196023b2a08eca9d7198" IssueInstant="2022-06-20T13:55:33.363Z" Version="2.0"></div>
<div> <saml2:Issuer>https://dev2.webauth.soton.ac.uk/shibboleth</saml2:Issuer></div>
<div> <saml2:Subject></div>
<div> <saml2:NameID Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient" NameQualifier="https://dev2.webauth.soton.ac.uk/shibboleth" SPNameQualifier="https://play01982.soton.ac.uk/shibboleth">AAdzZWNyZXQxGwyRs+jhaCaHe6H4FrWlHhq/5eBHgkg5wzeuGIaLb82kIaLp/8f9qWvikz4nCsInmrtjvNdaHHfbC39kTqIcB5D3V3eQ4ipbSNYgUOu9dlKEI+mdZVwwcO1w6RDOczilvOhaZ+dJlv5vpaU8354=</saml2:NameID></div>
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof">
It appears the SP is requesting urn:oasis:names:tc:SAML:2.0:nameid-format:transient.<br>
</div>
<div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div id="Signature">
<div>
<div></div>
<div></div>
<div id="divtagdefaultwrapper" dir="ltr" style="font-size:12pt; color:#000000; font-family:Calibri,Helvetica,sans-serif">
<p style="margin-top:0px; margin-bottom:0px; margin-top:0; margin-bottom:0"></p>
<div style="color:rgb(33,33,33); font-family:wf_segoe-ui_normal,"Segoe UI","Segoe WP",Tahoma,Arial,sans-serif,serif,EmojiFont; font-size:15px; margin:0px">
<font size="2" face="Calibri,sans-serif"><span style="font-size:11pt"><font size="2" face="Trebuchet MS,sans-serif" color="gray"><span style="font-size:10pt; color:rgb(0,0,0)">Thanks</span></font></span></font></div>
<div style="color:rgb(33,33,33); font-family:wf_segoe-ui_normal,"Segoe UI","Segoe WP",Tahoma,Arial,sans-serif,serif,EmojiFont; font-size:15px; margin:0px">
<span style="color:rgb(0,0,0)"></span><font size="2" face="Calibri,sans-serif"><span style="font-size:11pt"><font size="2" face="Trebuchet MS,sans-serif" color="gray"><span style="font-size:10pt; color:rgb(0,0,0)">Nilan</span><span style="font-size:10pt"><br>
</span></font></span></font></div>
<div style="color:rgb(33,33,33); font-family:wf_segoe-ui_normal,"Segoe UI","Segoe WP",Tahoma,Arial,sans-serif,serif,EmojiFont; font-size:15px; margin:0px">
<font size="2" face="Calibri,sans-serif"><span style="font-size:11pt"><font size="2" face="Trebuchet MS,sans-serif" color="gray"><span style="font-size:10pt"></span></font></span></font></div>
<div style="color:rgb(33,33,33); font-family:wf_segoe-ui_normal,"Segoe UI","Segoe WP",Tahoma,Arial,sans-serif,serif,EmojiFont; font-size:15px; margin:0px">
<font size="2" face="Calibri,sans-serif"><span style="font-size:11pt"><font size="2" face="Trebuchet MS,sans-serif" color="gray"><span style="font-size:10pt">----</span></font></span></font></div>
<div style="color:rgb(33,33,33); font-family:wf_segoe-ui_normal,"Segoe UI","Segoe WP",Tahoma,Arial,sans-serif,serif,EmojiFont; font-size:15px; margin:0px">
<font size="2" face="Calibri,sans-serif"><span style="font-size:11pt"><font size="2" face="Trebuchet MS,sans-serif" color="gray"><span style="font-size:10pt"><b>Nilan Morjaria-Patel</b></span></font><font size="2" face="Trebuchet MS,sans-serif" color="gray"><span style="font-size:10pt"> |
Infrastructure Engineer | Enterprise Systems Management | iSolutions</span></font></span></font></div>
<div style="color:rgb(33,33,33); font-family:wf_segoe-ui_normal,"Segoe UI","Segoe WP",Tahoma,Arial,sans-serif,serif,EmojiFont; font-size:15px; margin:0px">
<font size="2" face="Calibri,sans-serif"><span style="font-size:11pt"><font size="2" face="Trebuchet MS,sans-serif" color="gray"><span style="font-size:10pt">University of Southampton</span></font></span></font></div>
<div style="color:rgb(33,33,33); font-family:wf_segoe-ui_normal,"Segoe UI","Segoe WP",Tahoma,Arial,sans-serif,serif,EmojiFont; font-size:15px; margin:0px">
<font size="2" face="Calibri,sans-serif"><span style="font-size:11pt"><font size="2" face="Trebuchet MS,sans-serif" color="gray"><span style="font-size:10pt">Level 5, One Guildhall Square, Southampton, SO14 7FP</span></font></span></font></div>
<div style="color:rgb(33,33,33); font-family:wf_segoe-ui_normal,"Segoe UI","Segoe WP",Tahoma,Arial,sans-serif,serif,EmojiFont; font-size:15px; margin:0px">
<font size="2" face="Calibri,sans-serif"><span style="font-size:11pt"><font size="2" face="Trebuchet MS,sans-serif" color="gray"><span style="font-size:10pt"> </span></font></span></font></div>
<div style="color:rgb(33,33,33); font-family:wf_segoe-ui_normal,"Segoe UI","Segoe WP",Tahoma,Arial,sans-serif,serif,EmojiFont; font-size:15px; margin:0px">
<font size="2" face="Calibri,sans-serif"><span style="font-size:11pt"><a href="mailto:n.morjaria-patel@soton.ac.uk" target="_blank" rel="noopener noreferrer"><font size="2" face="Trebuchet MS,sans-serif"><span style="font-size:10pt">n.morjaria-patel@soton.ac.uk</span></font></a><font size="2" face="Trebuchet MS,sans-serif" color="gray"><span style="font-size:10pt"> |
+44 2380 595680 | ext 25680</span></font></span></font></div>
<div style="color:rgb(33,33,33); font-family:wf_segoe-ui_normal,"Segoe UI","Segoe WP",Tahoma,Arial,sans-serif,serif,EmojiFont; font-size:15px; margin:0px">
<font size="2" face="Calibri,sans-serif"><span style="font-size:11pt"><font size="2" face="Trebuchet MS,sans-serif" color="gray"><span style="font-size:10pt"> </span></font></span></font></div>
<div style="color:rgb(33,33,33); font-family:wf_segoe-ui_normal,"Segoe UI","Segoe WP",Tahoma,Arial,sans-serif,serif,EmojiFont; font-size:15px; margin:0px">
<font size="2" face="Calibri,sans-serif"><span style="font-size:11pt"><font size="2" face="Trebuchet MS,sans-serif" color="gray"><span style="font-size:10pt">Manage your IT tickets and requests at: </span></font><a href="http://www.southampton.ac.uk/ithelp" target="_blank" rel="noopener noreferrer"><font size="2" face="Trebuchet MS,sans-serif"><span style="font-size:10pt"><font color="blue"></font></span></font></a><font size="2" face="Trebuchet MS,sans-serif"><font color="blue"><a href="https://sotonproduction.service-now.com/soton/it.do" class="OWAAutoLink">https://sotonproduction.service-now.com/soton/it.do</a></font></font></span></font></div>
<br>
<p style="margin-top:0px; margin-bottom:0px"></p>
</div>
</div>
</div>
</div>
</body>
</html>