Genetating eduPersonTargetedID for UK Federation

[Peter Schober]

* Cantor, Scott <cantor.2 at osu.edu> [2016-01-26 18:11]:
> > Thank you Scott. From what I've read on the uk federation website,
> > eduPersonTargetedID is a required attribute.
> 
> I don't believe the UK federation mandates release of specific
> attributes, as InCommon does not, but I could be wrong.

That was probably meant as "required to support", not "required to
release" (and even then you could discuss the details of that that
meant and means today) but either way, there are probably quite a few
SPs out there that were previously (or are currently) expecting the
NameID in the eduPersonTargetedID Attribute and are not prepared to
find the same NameID in the Assertion's Subject.
E.g. SimpleSAMLphp doesn't currently have a built-in way to treat
NameIDs like attributes the way the Shib SP does, so unless SSP
deployers where aware this might become an issue in the future and
coded their application integration to also look at NameIDs, those
would all break by switching.
Those actually relying on NameIDs/ePTIDs, of course.
-peter