StoredID/persistentID only when used?

[Simon Lundström]

On Thu, 2016-09-08 at 08:39:58 +0200, Simon Lundström wrote:
> On Tue, 2016-09-06 at 14:24:30 +0000, Cantor, Scott wrote:
> > > I found this <http://marc.info/?l=shibboleth-
> > > users&m=133243900920455&w=2>
> > > mail and the answer was no then but I'll ask again to see if it's changed.
> > 
> > If you attach an activationCondition to the data connector or generator it's possible.
> 
> I remember another thread on the mailinglist (which I couldn't find)
> where you told me (IIRC) that the only way to configure which NameID an
> SP is supposed to use is via it's SP metadata. Then you can configure a
> preference in relying-party.xml if the SP suggest multiple.
> 
> Did I understand it correctly?
> 
> For checking the SPs metadata I'm guessing we should use
> MetadataNameIdentifierFormatStrategy?
> 
> Which predicate can be used for checking relying-party config?

Uh, MetadataNameIdentifierFormatStrategy is not a predicate.
DefaultNameIDPolicyPredicate might be the one I want?

I can't seem to get the constructor right though. How do I input what
NameID format I expect in the bean definition? format is not a property
and not a constructor.

What I've got so far:

global.xml:
<bean id="MyCondition" parent="shibboleth.Conditions.EntityDescriptor">
  <constructor-arg name="pred">
    <bean class="org.opensaml.saml.common.profile.logic.DefaultNameIDPolicyPredicate">
    </bean>
  </constructor-arg>
</bean>

saml-nameid.xml:
[…]
<bean parent="shibboleth.SAML2PersistentGenerator"
  p:activationCondition-ref="MyCondition"
/>
[…]

attribute-resolver.xml:
<resolver:DataConnector id="StoredId" xsi:type="StoredId"
  xmlns="urn:mace:shibboleth:2.0:resolver:dc"
  generatedAttributeID="persistentId"
  sourceAttributeID="uid"
  salt="%{su.idp.eptid.salt}"
  activationConditionRef="MyCondition"
>
[…]

BR,
- Simon