AW: Genetating eduPersonTargetedID for UK Federation

Ortner Nikolaus N.Ortner at fh-kaernten.at
Wed Jan 27 07:25:09 EST 2016


> Is updating those to recommend releasing the NameID in the Subject's
> Assertion instead an option going forward?

Probably this will take some time. But this brings me to my problem:

Recently we updated our IdP v2 to v3 and we are still generating the SAML2 Persistent NameID with the legacy nameid-generator enabled, as we've seen the attribute eduPersonTargetedID missing in the assertion otherwise. As we have one, maybe two, service providers relying on the presence of this attribute, I still have not figured out how to properly generate eduPersonTargetedID with the new mechanisms. Any how-to or link highly appreciated.

Kind regards.



More information about the users mailing list