Deprecation of SAML2NameID attribute definitions in the IdP v3 vs. need to transmit eduPersonTargetedID as an attribute

Kaspar Brand kaspar.brand at switch.ch
Fri Apr 17 10:24:44 EDT 2015


Given that with the IdP v3, both the StoredId data connector and the
SAML2NameID AttributeDefinition type are flagged as deprecated
([1],[2]), what would be a future-proof way of wiring the
eduPersonTargetedID attribute to the shibpid table? Is there a
possibility to define an attribute based on the output of a
new-style NameID generator?

I didn't find it mentioned in the docs, and examining the config files
didn't provide further clues as to whether/how it can be achieved in
3.1. Thanks for any additional insights.

Kaspar


[1] https://wiki.shibboleth.net/confluence/display/IDP30/StoredIdConnector

[2] https://wiki.shibboleth.net/confluence/display/IDP30/AttributeDefinitionConfiguration#AttributeDefinitionConfiguration-AttributeResolverPluginTypes


More information about the users mailing list