eduPersonTargetedID - how is it constructed?

[Dick Visser]

The reason I'm asking is that I've recently had a case of an IdP that
moved from SimpleSAMLphp to Shib.
It seems that SSP and Shib use a similar way to generate ePTID (they
use a salt, entityid, and an attribute as input), but they're not
exactly the same. This causes the IDs to be different, so all accounts
break.

I know it's still early, but eventually shifting IdPs will become a
more common scenario, so I was wondering how this can be solved.

Since both IdPs already have user bases, changing the current way of
generating IDs isn't an option. So I thought of a configuration option
in both SSP to make one behave like the other.

Any ideas?



and those drinks are a good idea!


On 19 May 2014 21:18, Peter Schober <peter.schober at univie.ac.at> wrote:
> * Dick Visser <visser at terena.org> [2014-05-19 18:28]:
>> I'm looking for the piece of code that constructs the
>> eduPersonTargetedID.  Any idea where this is located?
>
> For the non-first value it's a type-4 UUID, IIRC.
> Why you're even asking that I'll ask you over a drink tomorrow,
> hopefully ;)
> -peter
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net



-- 
Dick Visser
System & Networking Engineer
TERENA Secretariat
Singel 468 D, 1017 AW Amsterdam
The Netherlands