IDEA: Make SAML IdP entity format optional when CA SSO acts as IDP as when it acts as SP

[Kobi Azran]

Hello community,

As per the RFC http://docs.oasis-open.org/security/saml/v2.0/sstc-saml-approved-errata-2.0.html If the message is signed or if an enclosed assertion is encrypted, then the element MUST be present.
Otherwise it MAY be omitted.
If present it MUST contain the unique identifier of the issuing identity provider; the Format attribute MUST be omitted or have a value of urn:oasis:names:tc:SAML:2.0:nameid-format:entity.

Some SP provider do not support entity format specification which is acceptable as per RFC but when CA SSO is acting as IdP, format specification is not optional (oppose to when CA SSO is acting as SP).

This makes it impossible to implement SAML federation with some partners with third party SAML SP providers.

It is much needed to make this configuration optional and aligned with CA SSO acting as SP.

Thanks,
Kobi.