persitentID nameID for specific SPs, transient for default

[Andrew Morgan]

On Mon, 18 Dec 2017, jehan procaccia wrote:

> perhaps the warning  mention on 
> https://wiki.shibboleth.net/confluence/display/IDP30/ComputedIdConnector 
> regarding different xml schema whether we use 3.3 or lower , mine 3.2 !?
>
> suffixes as*dc* or *ad* needs to be added for me in v 3.2 ?
> as in
> <DataConnector xsi:type="*dc:*ComputedId" ?
> or
> <resolver:AttributeDefinition id="eduPersonTargetedID" 
> xsi:type="*ad:*SAML2NameID"
>
> here's what I have set :
>
>     <resolver:DataConnector xsi:type="ComputedId"
>                             id="computedID"
>                             generatedAttributeID="computedID"
> sourceAttributeID="eduPersonPrincipalName"
>                             salt="%{idp.persistentId.salt}">
>         <resolver:Dependency ref="myLDAP" />
>     </resolver:DataConnector>
>
>
>     <resolver:AttributeDefinition xsi:type="SAML2NameID" 
> id="eduPersonTargetedID"
> nameIdFormat="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent" 
> sourceAttributeID="computedID">
>         <resolver:Dependency ref="computedID" />
>         <resolver:AttributeEncoder xsi:type="SAML1XMLObject" 
> name="urn:oid:1.3.6.1.4.1.5923.1.1.1.10" />
>         <resolver:AttributeEncoder xsi:type="SAML2XMLObject" 
> name="urn:oid:1.3.6.1.4.1.5923.1.1.1.10" friendlyName="eduPersonTargetedID" 
> />
>     </resolver:AttributeDefinition>
>
> is there something wrong in my syntax ?

Here is the same configuration before the XML namespace change:

   <resolver:DataConnector xsi:type="dc:ComputedId"
                           id="computedID"
                           generatedAttributeID="computedID"
                           sourceAttributeID="%{idp.persistentId.sourceAttribute}"
                           salt="%{idp.persistentId.salt}">
       <resolver:Dependency ref="myLDAP" />
   </resolver:DataConnector>

   <resolver:AttributeDefinition xsi:type="ad:SAML2NameID" id="eduPersonTargetedID"
                                 nameIdFormat="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent" sourceAttributeID="computedID">
       <resolver:Dependency ref="computedID" />
       <resolver:AttributeEncoder xsi:type="enc:SAML1XMLObject" name="urn:oid:1.3.6.1.4.1.5923.1.1.1.10" />
       <resolver:AttributeEncoder xsi:type="enc:SAML2XMLObject" name="urn:oid:1.3.6.1.4.1.5923.1.1.1.10" friendlyName="eduPersonTargetedID" />
   </resolver:AttributeDefinition>


Thanks,
 	Andy