using the SimpleAggregation AttributeResolver

[Cantor, Scott]

> If there's anyone using this plugin in production, I'd really like to
> hear about it.

I know SWITCH has used it.

> One question right off the top: If the attributeId XML attribute is
> omitted, will the plugin use the previously asserted SAML2 Persistent
> NameID? More generally, can the plugin be made to use the value of
> eduPersonTargetedID as the NameID?

attributeId (space-delimited list of strings)
        Optional list of attribute IDs to search for a value to use as the identifier in the queries performed. The first attribute value found will be used as the value of the <NameID>. If this attribute is omitted, the original <NameID> supplied by the user's original IdP is simply copied directly.

When it's talking about "attribute" there, it means a decoded attribute inside the SP, which can come from anything you can extract into an attribute.

-- Scott