Changing NameID from transient to persistent

[Peter Schober]

* VANNA <VIGNESH at MUSC.EDU> [2014-01-29 18:37]:
> Currently, a random number is generated as NameID and is passed to all the
> existing SPs. From your previous email, I understand that I can keep passing
> the random number to all the existing SPs and a persistent value(uid or
> email) to the new SP.  I was thinking the relying-party can have only on
> NameID. Could you please let me know how would I make the change? I read the
> document but it doesnt say about 2 NameIDs.

https://wiki.shibboleth.net/confluence/display/SHIB2/IdPConfiguration
-> "Support a new Name Identifier"
https://wiki.shibboleth.net/confluence/display/SHIB2/IdPNameIdentifier

The currently recommended way to produce a persistent NameID is by
using the
https://wiki.shibboleth.net/confluence/display/SHIB2/ResolverStoredIDDataConnector
which requires a relational database system.

If you understand what you're doing (and how stable the inputs to the
algorithm are) you can also look at the ComputerID approach, which is
not recommended as it doesn't actually provide "persistence".

Please ask specific questions regarding the documentation. Noone here
will start re-explaining everything that's there just in case you have
not fully understood it.
-peter