...
Suppose the sub claim in the above ID token is a pairwise sub claim. Then that claim can be mapped to the following SAML2 Persistent NameID:
| Code Block | ||||
|---|---|---|---|---|
| ||||
<saml2:NameID Format="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent" NameQualifier="https://server.example.com" >24400320</saml2:NameID> |
Note that the saml2:NameID/@SPNameQualifier XML attribute has been omitted.