IdPv3 - eduPersonTargetedID - How to define and release this attribute?

[Cantor, Scott]

On 3/17/16, 6:31 PM, "users on behalf of Tom Scavo" <users-bounces at shibboleth.net on behalf of trscavo at gmail.com> wrote:


>
>The REFEDS Research & Scholarship specification [1] is very clear about this:
>
><quote>
>For the purposes of access control, a non-reassigned persistent
>identifier is required. If your deployment of eduPersonPrincipalName
>is non-reassigned, it will suffice. Otherwise you MUST release
>eduPersonTargetedID (which is non-reassigned by definition) in
>addition to eduPersonPrincipalName.
></quote>

First sentence in eduPerson's definition of ePTID:

eduPersonTargetedID is an abstracted version of the SAML V2.0 Name 
Identifier format of 
"urn:oasis:names:tc:SAML:2.0:nameid-format:persistent"


It can't be much more explicit than that. The NameID is perfectly adequate.

-- Scott