RE: [security-services] NameIDType question

> I have a feeling this has been discussed in the past, but I 
> can't seem to remember the answer: In SAML-CORE 2.2.2 Complex 
> Type NameIDType, is the Format attribute intended to apply to 
> the value of the NameIDType element only, or also to the 
> value of the SPProvidedID attribute?

The SPProvidedID attribute is opaque in the context of SAML because it's
produced and consumed by the same entity. It can be structured however an SP
wants as long as it's a legal XML string.

We probably should have constrained the length, but that's about all that
might be missing.

-- Scott