ArtStore regarding SSO

[Klingenstein, Nate]

Dr. Natas,

> New to Shibboleth here. We just spoke to customer support for ArtStor and
> they wanted us to release the "EduPersonTargetedId".

Welcome. :D

> Does this mean that I have to add to our attribute-filter.xml?

It depends.  Which version are you running?

> The question is that we don't have the "eduPersonTargetedID" associated in
> any of our LDAP attributes. Since we are part of the InCommon Federation is
> this something that is automatically applied to our release attributes. Does
> this look right to anyone?

We can't tell you if it's right or wrong for your world.

I can say that releasing eduPersonTargetedID to all services could change the behavior of some services.  It shouldn't, but it could.

The actual attribute, eduPersonTargetedID, is not an LDAP attribute.  It's like persistentId, an idea unique to federated identity.  The link at the bottom explains.

I would do three things:

1)  Make sure you're on a recent IdP release
2)  Ask ArtStor if they support persistentId, too.  This is a more standard form of the same idea.
3)  Set up persistentId support in your IdP and release that attribute selectively.  There are lots of ways you can do this.  Here is documentation.

https://wiki.shibboleth.net/confluence/display/IDP30/PersistentNameIDGenerationConfiguration

If ArtStor can't support persistentId, then I would use targetedId.

I hope this helps,
Nate.