computedID in idpv3

[Cantor, Scott]

> I don't think there's any way to use that to populate the
> eduPersonTargetedID though, so deprecating the dataconnector version of
> the computedid effectively deprecates using it as the source for
> eduPersonTargetedID.

Yes, because that attribute is deprecated. The only implementation that seems to be broken in this regard is SSP. Mostly SPs can't handle a NameID-valued attribute anyway.

> Which Tom said shouldn't matter if you're not using
> SAML1, but I'm not quite clear how yet.

Because SAML 2 persistent NameIDs are duplicative of the original attribute, it was a SAML 1 hack to support what SAML 2 already supported.

-- Scott