idp3 - eptid / nameid
Peter Schober
peter.schober at univie.ac.at
Fri Oct 2 09:50:04 EDT 2015
* Liam Hoekenga <liamr at umich.edu> [2015-10-02 15:45]:
> For SPs that want to continue using (something like) ePTID w/ IdPv3, they
> need to configured shibboleth2.xml to pull REMOTE_USER from nameID?
No. That would happen in the attribute-map.xml (not shibboleth2.xml)
but is already the default: A persistent NameID from the Assertion's
Subject has always been mapped to the same internal structure
("persistent-id", by default) as as persistent NameID transmitted as
eduPersonTargetedID SAML Attribute.
So Shib SPs won't notice a difference (unless they changed their
config rom the default).
-peter
More information about the users
mailing list