Genetating eduPersonTargetedID for UK Federation
Alex Stuart
alex.stuart at ed.ac.uk
Wed Jan 27 04:48:19 EST 2016
On 26/01/2016 18:08, Peter Schober wrote:
> * Cantor, Scott <cantor.2 at osu.edu> [2016-01-26 18:11]:
>>> Thank you Scott. From what I've read on the uk federation website,
>>> eduPersonTargetedID is a required attribute.
>>
>> I don't believe the UK federation mandates release of specific
>> attributes, as InCommon does not, but I could be wrong.
>
> That was probably meant as "required to support", not "required to
> release"
The UK federation's "Technical Recommendations for Participants"
recommends IdPs support eduPersonTargetedID as one of the core
attributes. You can find a list of Services in the UK federation that
request this attribute at
http://www.ukfederation.org.uk/content/Documents/AvailableServices?action=search&q=eduPersonTargetedID
The UK federation's website documentation for setting up a v2 IdP
includes a snippet for attribute-filter.xml which releases this
attribute to all SPs (at
http://www.ukfederation.org.uk/content/Documents/Setup2IdP#attribute-filter.xml).
That should work in a v3 IdP if you ensure the namespace prefix afp: is
defined appropriately.
Assuming you already have configured whatever DataConnector the
ComputedID DataConnector depends on, you should be able to copy in the
AttributeDefinitions and the ComputedID DataConnector from your IdP's
existing attribute-resolver.xml. There are also snippets for this at
http://www.ukfederation.org.uk/content/Documents/Setup2IdP#attribute-resolver.xml
Alex
--
Alex Stuart
Team Leader - Federated Access Management
EDINA, University of Edinburgh
The University of Edinburgh is a charitable body, registered in
Scotland, with registration number SC005336.
More information about the users
mailing list