IdPv3 - eduPersonTargetedID - How to define and release this attribute?
Cantor, Scott
cantor.2 at osu.edu
Thu Mar 17 12:23:02 EDT 2016
> But I am not sure where I go from there. I am thinking that I need to configure
> *something* to make the Name ID available to an R&S supporting SP-- but I
> don't know what that *something* is.
NameID Format selection is discussed on the top level NameIDGeneration page, but to do this on the basis of R&S universally, what you would do is probably set up a RelyingPartyByTag override in relying-party.xml that references the R&S EntityAttribute and specify the nameIDFormatPrecedence property in that override with the constant for the "persistent" Format.
The RelyingPartyConfiguration topic has an example of doing an override for R&S explicitly, and the nameIDFormatPrecedence setting goes inside the SAML2.SSO profile config bean you enable in the override.
Ordinarily the NameID Format should be driven by metadata or the SP, but to cover a whole tagged class of applications, a tag-based override is the simplest way.
-- Scott
More information about the users
mailing list