<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">You can use the<div class=""><br class=""></div><div class=""> p:responderId="Whatever_Alternate_EntityID_You_Want"</div><div class=""><br class=""></div><div class="">attribute in a relying party override, set in the relying pary override bean main element, not an attribute on the profiles themselves.<br class=""><div><br class=""><blockquote type="cite" class=""><div class="">On Jul 5, 2023, at 7:55 PM, IAM David Bantz via users <<a href="mailto:users@shibboleth.net" class="">users@shibboleth.net</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><span style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 18px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;" class="">Attempting to have VMware Horizon rely on IdP for SSO sign-ins. Apparently the Horizon rejects IdP metadata with URN emtityID.</span><div dir="ltr" style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 18px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class="">Anyone have a remedy? We can provide an altered copy of metadata, but the “Issuer” in SAML response will still be the “real” URN entityID.</div></div></blockquote></div><br class=""><div class="">
<div>--<br class="">Michael A. Grady<br class="">IAM Architect, Unicon, Inc.</div><div class=""><br class=""></div><br class="Apple-interchange-newline">
</div>
<br class=""></div></body></html>