Deprecation of SAML2NameID attribute definitions in the IdP v3 vs. need to transmit eduPersonTargetedID as an attribute
Kaspar Brand
kaspar.brand at switch.ch
Fri Apr 17 10:24:44 EDT 2015
Given that with the IdP v3, both the StoredId data connector and the
SAML2NameID AttributeDefinition type are flagged as deprecated
([1],[2]), what would be a future-proof way of wiring the
eduPersonTargetedID attribute to the shibpid table? Is there a
possibility to define an attribute based on the output of a
new-style NameID generator?
I didn't find it mentioned in the docs, and examining the config files
didn't provide further clues as to whether/how it can be achieved in
3.1. Thanks for any additional insights.
Kaspar
[1] https://wiki.shibboleth.net/confluence/display/IDP30/StoredIdConnector
[2] https://wiki.shibboleth.net/confluence/display/IDP30/AttributeDefinitionConfiguration#AttributeDefinitionConfiguration-AttributeResolverPluginTypes
More information about the users
mailing list