Release Notes › Federation Security Services Release Notes › Defects Fixed in the Policy Server 6.0 SP5 Option Pack › Fixes for Policy Server 6.0 SP5 Option Pack › Commas Cannot Separate Relative DNs in the NameID Defined as an X509SubjectName (76311)

Previous Topic: Signature for SAML 1.1 Assertions Unclear With Multiple Affiliate Domains (76161)

Next Topic: SLO Response Location URL Not Being Set Correctly (77359)
Commas Cannot Separate Relative DNs in the NameID Defined as an X509SubjectName (76311)

Symptom:

When the NameID in an assertion is set to X509SubjectName and the contents of the NameID is an LDAP DN, the Policy Server is escaping the commas in the NameID. For example, &ltns2:NameID.

Solution:

Do not escape the commas separating the relative Distinguished Names in the NameID.