SAML 2.0 SPProvidedID

["Lars Beekmann" <L.Beekmann@intershop.de>]

Hi @ all,

 

Is the SPProvidedID Attribute usable as a kind of foreign key at the IdP? I thought about the following:

1. Establish Persistent Federation between IdP and SP via Browser SSO Profile (User has Account at both parties)
2. the SP immediately issues a ManageNameIDRequest to the IdP containing its primary key for the respective user as SPProvidedID
3. in all following requests to the IdP, the SP uses the SPProvidedID (provided as NameID attribute; omitting the IdP’s NameID String) when referring to the Subject and thus needn’t hold the Subject’s NameID provided by the IdP

Is this possible or does the IdP need the NameID to idenitify the subject?

 

Thanks for any help!

Lars