Persistent ID via eduPersonTargetedID in IdP 2.4.4

[Cantor, Scott]

> The closest thing my research found suggested editing attribute resolver to
> change the ePTID AttributeDefinition's xsi:type from "ad:SAML2NameID" to
> "Simple", but when I deployed that to Dev environment, it wouldn't start
> Shibboleth, and gave "Attribute 'nameIdFormat' is not allowed to appear in
> element 'resolver:AttributeDefinition'." in idp-process.log.

Generating a persistentID in the Subject involves the StringSAML2NameID encoder layered on top of the result of one of the two data connectors (computed or stored), but your problem is probably the use of the SAML2NameID attribute definition. You want ad:Simple instead.

-- Scott