IdPv3 - eduPersonTargetedID - How to define and release this attribute?

Cantor, Scott cantor.2 at osu.edu
Thu Mar 17 11:29:02 EDT 2016


> From reading the docs, I gather that in order to ultimately release this
> attribute, I need to configure a persistent name ID generator [1].  However,
> once I have set up the generator, I am not sure what I am supposed to do
> next.  Does the attribute get defined in `attribute-resolver.xml`?  How is it
> defined?  Once it is defined, can I release it via `attribute-filter.xml` the same
> way I would release any other attribute?

If you're trying to use eduPersonTargetedID as an attribute, the first steps are to question why, push back, and not to do it.

If you do need to do that for some legacy application that can't support persistent NameIDs or is SAML 1 only, then the only way to do it is to configure it the same way as it would have been in V2, using the resolver, and not with the documentation you're looking at. The ability is deprecated but removing it would be akin to removing SAML 1 support, not something that's going to happen any time soon.

-- Scott



More information about the users mailing list