overriding transient / persistent nameid values in IdP v3

Cantor, Scott cantor.2 at osu.edu
Tue Sep 8 16:50:10 EDT 2015


On 9/8/15, 4:45 PM, "users on behalf of Liam Hoekenga" <users-bounces at shibboleth.net on behalf of liamr at umich.edu> wrote:
>
>Kaltura and our Service-Now instance both want transientId populated with uid or ePPN, and we have a couple of campus instances of NetIQ AccessManager that want persistentId populated with uid.

Service-Now does NOT require that (we use it) and I'm fairly sure we use Kaltura too.

They don't care what the NameID format is, so you don't need to do this.

>Is there any documentation on the activationConditions?  Is it the same stuff that's available to relying parties and attribute filters?

Yes, all properties with that name are Predicate<ProfileRequestContext>. shibboleth.Conditions.RelyingPartyId is already defined to support lists of SPs.

But it's moot, you almost certainly don't need any of this.

-- Scott



More information about the users mailing list