CODEWITHSUNDEEP
azuresamlsaml-2.0upn
Jebin Matthew
Jebin Matthew

Reputation: 35

Recommended NameIdFormat for using User Principle Name (UPN) as NameId in SAML

We have the following name id formats to choose from.

If I need the UPN value of an user to be returned by my IDP (say Azure or ADFS, etc) which nameid format should I choose? Should I configure my IDP to send the UPN value with 'unspecified' as the nameid format or should I go choose persistent? Or is there any other recommended nameid format for sending/requesting UPN?

Upvotes: 0

Views: 912

Answers (1)

Andrew K.
Andrew K.

Reputation: 3351

Understand that as the SP, you generally define the contract that is required to utilize your service. There's rarely a reason to not use unspecified, unless your federation tool supports some automated validation of the attribute against the format definition.

Even if your tool does support that validation, that doesn't absolve of doing your own validation of the data.

As such, I would choose unspecified. It offers the most flexibility.

Upvotes: 2

Related Questions