eduPersonTargetedID

[Cantor, Scott]

On 4/26/13 3:40 PM, "Qian, Yi" <yqian at ku.edu> wrote:

>I know it is already unique because I tested against testshib, the problem
>is my manager like to have encode NameID unique to each SP too, he wants
>the NameID includes idp entity id, sp entity id and uid

That is *already* how it works. I don't think I'm making this clear. You
should absolutely NOT be creating your own string as a NameID that
includes those bangs or entityIDs. That would be totally unreasonable.
Depending on where you do it, it's either redundant to the hash, or it
will bloat the size of your attribute value to a totally crazy size.

The way this looks in SAML is this:

<NameID Format="...persistent" NameQualifier="IdP name"
SPNameQualifier="SP name">
value
</NameID>

You don't handle the inclusion of the entityIDs, that's done for you.

-- Scott