Idp 3.x persistentId / shibsp-plugin-AttributeQuery-Handler

[Cantor, Scott]

On 4/17/15, 6:42 AM, "Raffael Sahli" <sahli at gyselroth.com> wrote:
>
>I'm right know not exactly sure if this is a problem with idp 3.x and the sp attribute query extension,
>or just a misconfiguration.

If you want to query using persistent IDs, then you have to be able to reverse them. The NameIDConsumption topic discusses that.

"If you want to allow reversal of persistent IDs, they must be generated using a storage-based strategy (see NameIDGenerationConfiguration) and you must uncomment the "c14n/SAML2Persistent" bean reference here."


-- Scott