IdPv3 and generating persistent NameID

[Sara Hopkins]

I'm trying to get my v3 test IdP to release persistent NameIDs as per the documentation here:

https://wiki.shibboleth.net/confluence/display/IDP30/NameIDGenerationConfiguration

But I'm having trouble getting it working. I assume that if it works I should see a saml2:NameID with Format="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent" in the SAML 2 assertion; is that correct?

I've edited the saml-nameid.properties file so I have these values set:

idp.persistentId.generator = shibboleth.ComputedPersistentIdGenerator
idp.persistentId.sourceAttribute = "uid"
idp.persistentId.salt = "your random string here"

and I've edited the saml-nameid.xml file and uncommented this:

        <ref bean="shibboleth.SAML2PersistentGenerator" />

I have an attribute definition in attribute-resolver.xml for the source attribute "uid", and an attribute-filter.xml rule to release the source attribute "uid" to the SP.

When I log into the SP I can see that the "uid" attribute is in the assertion, but I can't see anything that looks to me like a persistent NameID.

What am I missing?

Many thanks,

Sara
-- 
Sara Hopkins
Support Team
UK Access Management Federation for Education and Research
web:    http://www.ukfederation.org.uk/

The University of Edinburgh is a charitable body, registered in
Scotland, with registration number SC005336.