Idp 3.x persistentId / shibsp-plugin-AttributeQuery-Handler

[Raffael Sahli]

Hi 

I'm trying to implement shibsp-plugin-AttributeQuery-Handler 
(https://bitbucket.org/PEOFIAMP/shibsp-plugin-attributequery-handler/src)
on my SP. Actually this was no problem at all.

But I'm not exactly sure how I have to configure my IdP 3.x to 
release the persistentId as an attribute.

shibsp-plugin-attributequery-handler should return the attributes as json with:
https://sp.example.ac.jp/Shibboleth.sso/AttributeQuery\
  ?entityID=https%3A%2F%2Fidp.example.ac.jp%2Fidp%2Fshibboleth\
  &nameId=XXXXXXXXXXXXXXXXXXXXXXXXXXX%3D


Switch[1] describes the persistent attribute as a triple like:
<name for the source of the identifier>!<name for the intended audience of the identifier >!<opaque identifier for the principal >

which should contain the paramter nameId for the shibsp-plugin-attributequery-handler request
(https://sp.example.ac.jp/Shibboleth.sso/AttributeQuery?nameId=?)


I have read the following wiki article:
https://wiki.shibboleth.net/confluence/display/IDP30/NameIDGenerationConfiguration

and configured saml-nameid.properties:
  idp.persistentId.sourceAttribute = persistentId
  idp.persistentId.salt = ***


How can I get the attribute persistentId to my SP?
Maybe I'm just not quite sure how the persistentId name thing works... :(


Thanks for help!

Raffael Sahli


[1] https://www.switch.ch/aai/guides/sp/persistentid/