Persistent ID via eduPersonTargetedID in IdP 2.4.4

[Peter Schober]

* Kylie Lunghusen <kylie.lunghusen at rmit.edu.au> [2017-07-03 05:05]:
> I've inherited the running of our Shibboleth IdP, and I can't get
> persistentID-via-eduPersonTargetedID working properly. Shibboleth version
> is 2.4.4 (yes I know; upgrade project is underway but will take a while).

Here's a complete, working example:

  <!-- Attribute form, deprecated for SAML2 use -->
  <resolver:AttributeDefinition id="eduPersonTargetedID" xsi:type="ad:SAML2NameID" 
    nameIdFormat="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent" sourceAttributeID="StoredPersistentId">
    <resolver:Dependency ref="SQLPersistentId" />
    <resolver:AttributeEncoder xsi:type="enc:SAML1XMLObject" name="urn:oid:1.3.6.1.4.1.5923.1.1.1.10" />
    <resolver:AttributeEncoder xsi:type="enc:SAML2XMLObject" name="urn:oid:1.3.6.1.4.1.5923.1.1.1.10" friendlyName="eduPersonTargetedID" />
  </resolver:AttributeDefinition>

  <!-- https://spaces.internet2.edu/display/SHIB2/IdPPersistentNameIdentifier -->
  <resolver:AttributeDefinition xsi:type="ad:Simple" id="persistentId" sourceAttributeID="StoredPersistentId">
    <resolver:Dependency ref="SQLPersistentId" />
    <resolver:AttributeEncoder xsi:type="enc:SAML1StringNameIdentifier" nameFormat="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent" />
    <resolver:AttributeEncoder xsi:type="enc:SAML2StringNameID" nameFormat="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent" />
  </resolver:AttributeDefinition>

  <!-- The usual Data Connector -->
  <resolver:DataConnector xsi:type="dc:StoredId" id="SQLPersistentId"
    generatedAttributeID="StoredPersistentId" ...etc...

HTH,
-pter