Genetating eduPersonTargetedID for UK Federation

[Kevin Ratcliffe]

Sorry, I was wrong. I've found the document and it states 'recommended
to support'.
________________________________________
From: users [users-bounces at shibboleth.net] on behalf of Peter Schober [peter.schober at univie.ac.at]
Sent: 26 January 2016 18:08
To: users at shibboleth.net
Subject: Re: Genetating eduPersonTargetedID for UK Federation

* Cantor, Scott <cantor.2 at osu.edu> [2016-01-26 18:11]:
> > Thank you Scott. From what I've read on the uk federation website,
> > eduPersonTargetedID is a required attribute.
>
> I don't believe the UK federation mandates release of specific
> attributes, as InCommon does not, but I could be wrong.

That was probably meant as "required to support", not "required to
release" (and even then you could discuss the details of that that
meant and means today) but either way, there are probably quite a few
SPs out there that were previously (or are currently) expecting the
NameID in the eduPersonTargetedID Attribute and are not prepared to
find the same NameID in the Assertion's Subject.
E.g. SimpleSAMLphp doesn't currently have a built-in way to treat
NameIDs like attributes the way the Shib SP does, so unless SSP
deployers where aware this might become an issue in the future and
coded their application integration to also look at NameIDs, those
would all break by switching.
Those actually relying on NameIDs/ePTIDs, of course.
-peter
--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net

This email has been scanned by BSFC and seems to be OK