In specific scenarios, the Service Provider (SP) may expect a Name ID Format nameid-format:transient instead of nameid-format:unspecified (that is configured in Okta by default). This article will walk through the process of using Postman with the Identity Providers (Okta API) collection to change the Name ID Format from nameid-format:unspecified to nameid-format:transient.
- Okta as Identity Provider (IdP)
- Postman
- Situations where
nameid-format:transientis the required format
The SP expects a Name ID Format that is different from the one configured in Okta by default.
- The following steps should be taken to change the Name ID Format from
nameid-format:unspecifiedtonameid-format:transient: - In the solution below, Postman will be used to run API calls. Before proceeding, please follow the steps to integrate POSTMAN with Okta.
- OAuth 2.0 Scope needed:
okta.idps.read
- Run the Get IdP request from the Identity Providers (Okta API) collection and replace the
{{idpid}}with the ID of the IdP being checked. - Capture the response from this GET call and prepare to make a PUT call by copying the result and placing it in Body > raw.
- Change the GET to a PUT call and replace the nameFormat with
"urn:oasis:names:tc:SAML:2.0:nameid-format:transient". - Initiate the PUT call by pressing Send and review Okta's response. A successful 200 OK response confirms the change.
