Targeted ID question

Robert Roll Robert.Roll at utah.edu
Wed Jun 26 15:40:53 EDT 2013


I do see the below in the attribute-resolver.xml file.
Does this out of the box, uncommented work ?

Also, my understanding of Targeted ID is that it is Pseudo Anonymous ?
In that, if someone, like say from law enforcement came looking, it should be
recoverable ? I'm assuming the "salt" algorithm is known ? If so, where is it ?
I guess one could actually go and compute ALL Computed ID's to figure it out
if really needed ?

Thanks,

Robert

    <!-- Computed targeted ID connector -->
    <!--
    <resolver:DataConnector xsi:type="dc:ComputedId"
                            id="computedID"
                            generatedAttributeID="computedID"
                            sourceAttributeID="uid"
                            salt="your random string here">
        <resolver:Dependency ref="myLDAP" />
    </resolver:DataConnector> 
    -->


________________________________________
From: users-bounces at shibboleth.net [users-bounces at shibboleth.net] on behalf of David Bantz [dabantz at alaska.edu]
Sent: Wednesday, June 26, 2013 1:32 PM
To: Shib Users
Subject: Re: Targeted ID question

Look in the default attribute-resolver.xml of you IdP; it likely has ePTID (and probably in at least two versions).

David Bantz


On Wed, 26 Jun 2013, at 11:26 , "Bryan E. Wooten" <bryan.wooten at utah.edu<mailto:bryan.wooten at utah.edu>> wrote:

Hi all,

We do not currently support eTPID [sic.], but now have a request for this attribute from an SP.

Can someone give me a clue on how to implement this? Is this something we can configure in our Idp or do we need to write some code? My google skills have failed me.

Thanks,

Bryan
--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net<mailto:users-unsubscribe at shibboleth.net>



More information about the users mailing list