AW: Genetating eduPersonTargetedID for UK Federation
Ortner Nikolaus
N.Ortner at fh-kaernten.at
Wed Jan 27 07:25:09 EST 2016
> Is updating those to recommend releasing the NameID in the Subject's
> Assertion instead an option going forward?
Probably this will take some time. But this brings me to my problem:
Recently we updated our IdP v2 to v3 and we are still generating the SAML2 Persistent NameID with the legacy nameid-generator enabled, as we've seen the attribute eduPersonTargetedID missing in the assertion otherwise. As we have one, maybe two, service providers relying on the presence of this attribute, I still have not figured out how to properly generate eduPersonTargetedID with the new mechanisms. Any how-to or link highly appreciated.
Kind regards.
More information about the users
mailing list