idp3 - eptid / nameid

Peter Schober peter.schober at univie.ac.at
Fri Oct 2 09:50:04 EDT 2015


* Liam Hoekenga <liamr at umich.edu> [2015-10-02 15:45]:
> For SPs that want to continue using (something like) ePTID w/ IdPv3, they
> need to configured shibboleth2.xml to pull REMOTE_USER from nameID?

No. That would happen in the attribute-map.xml (not shibboleth2.xml)
but is already the default: A persistent NameID from the Assertion's
Subject has always been mapped to the same internal structure
("persistent-id", by default) as as persistent NameID transmitted as
eduPersonTargetedID SAML Attribute.

So Shib SPs won't notice a difference (unless they changed their
config rom the default).
-peter


More information about the users mailing list