PersistentNameIDGenerationConfiguration - Can the identifiers be computed outside of Shibboleth IdPv3?

[Waldbieser, Carl]

The docs on PersistentNameIDGenerationConfiguration [1] outline 2 strategies-- computed vs. stored IDs.  It mentions computed IDs are easier to deploy, but reverse-mapping a given identifier is not possible (e.g. when debugging).

I was wondering-- if the source attributes are available to a privileged administrator, can the IDs be generated en masse and an ID be matched up with the computed list?  Is there a particular algorithm used to do the mapping that is described somewhere (other than in the code)?

Thanks,
Carl Waldbieser
ITS Identity Management
Lafayette College

[1] https://wiki.shibboleth.net/confluence/display/IDP30/PersistentNameIDGenerationConfiguration