Shibboleth Developers

[Tom Scavo <>]

I'm trying to implement a name mapping plugin, a somewhat more
generalized version of X509SubjectNameNameIdentifierMapping.  The
latter requires a qualifier attribute in the NameMapping config
element, while other plugins utilize a method called verifyQualifier
defined in BaseNameIdentifierMapping that examines the NameQualifier
attribute of the NameIdentifier element.  I've always wondered about
this disconnect, but I ignored it and forged ahead.

Now I've tried to remove the dependency on the qualifier attribute
with no success.  For some reason, at the time the NameIdentifier
object is created, the IdP providerId (the usual value of
NameQualifier) is not available to the plugin.  I don't know why this
is.

So I guess my first question is why is there a qualifier attribute in
this one case?  Second question is why is the IdP providerId null in
this case?  (I suspect the questions are related.)

Thanks,
Tom