NameIDPolicy Transient

andres.garcia

Hi there I'm trying to integrate with docebo.com but I'm getting this error

The error code is [InvalidNameIDPolicy] and the error message is [The AuthnRequest contained an invalid NameID policy. FusionAuth only supports the following NameID formats [urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress, urn:oasis:names:tc:SAML:2.0:nameid-format:persistent, urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified].]

I noticed this in the auth request

<samlp:NameIDPolicy Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient" AllowCreate="true"/>

There is any way I can solve this problem or Docebo is not compatible with fusionauth =(

I'm using version 1.30.2

andres.garcia

@andres-garcia Nothing to do here? somebody?

dan

@andres-garcia Sorry for the late response, kinda slammed.

https://fusionauth.io/docs/v1/tech/samlv2/#limitations says

FusionAuth supports only the following NameIDPolicy values:

urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress

urn:oasis:names:tc:SAML:2.0:nameid-format:persistent

urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified

So it seems like that isn't supported. Please feel free to file an issue https://github.com/fusionauth/fusionauth-issues/issues referencing this forum post and explaining you'd like this new NameIDPolicy value to be supported.

If you are a customer with a support contract, it's helpful if you file a support ticket as well. This helps us prioritize future work.