From c3593b1d7e4d79dcef1442c0261435c4c09fe697 Mon Sep 17 00:00:00 2001
From: "ian.boren" <ianboren@nebraska.edu>
Date: Thu, 2 Feb 2023 11:50:32 -0600
Subject: [PATCH] Resolve "Change NameIDFormat for Palo Alto Expanse to use
 email"

---
 nefed.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/nefed.xml b/nefed.xml
index ccebf87..e4f40d7 100644
--- a/nefed.xml
+++ b/nefed.xml
@@ -19292,7 +19292,7 @@ bHwSoBy5hLPNALaEUoa5zPDwlixwRjFQTc5XXaRpgIjy/2gsL8+Y5QRhyXnLqgO67BlLYW/GuHE=</ds
         Location="https://qadium.auth0.com/logout" />
         <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
         Location="https://qadium.auth0.com/logout" />
-        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</NameIDFormat>
+        <NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress</NameIDFormat>
         <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
         Location="https://qadium.auth0.com/login/callback?connection=XpanseNebraskaSSO-Expander"
         index="0" isDefault="true" />
-- 
GitLab