Persistent ID via eduPersonTargetedID in IdP 2.4.4

[Kylie Lunghusen]

Thanks, Peter. This looks good; I'll try it and get back to you.


--
Kylie Lunghusen
Technical Tools Administrator, University Operations
Information Technology Services, RMIT University

On 4 July 2017 at 01:18, Peter Schober <peter.schober at univie.ac.at> wrote:

> * Kylie Lunghusen <kylie.lunghusen at rmit.edu.au> [2017-07-03 05:05]:
> > I've inherited the running of our Shibboleth IdP, and I can't get
> > persistentID-via-eduPersonTargetedID working properly. Shibboleth
> version
> > is 2.4.4 (yes I know; upgrade project is underway but will take a while).
>
> Here's a complete, working example:
>
>   <!-- Attribute form, deprecated for SAML2 use -->
>   <resolver:AttributeDefinition id="eduPersonTargetedID"
> xsi:type="ad:SAML2NameID"
>     nameIdFormat="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent"
> sourceAttributeID="StoredPersistentId">
>     <resolver:Dependency ref="SQLPersistentId" />
>     <resolver:AttributeEncoder xsi:type="enc:SAML1XMLObject"
> name="urn:oid:1.3.6.1.4.1.5923.1.1.1.10" />
>     <resolver:AttributeEncoder xsi:type="enc:SAML2XMLObject"
> name="urn:oid:1.3.6.1.4.1.5923.1.1.1.10" friendlyName="eduPersonTargetedID"
> />
>   </resolver:AttributeDefinition>
>
>   <!-- https://spaces.internet2.edu/display/SHIB2/
> IdPPersistentNameIdentifier -->
>   <resolver:AttributeDefinition xsi:type="ad:Simple" id="persistentId"
> sourceAttributeID="StoredPersistentId">
>     <resolver:Dependency ref="SQLPersistentId" />
>     <resolver:AttributeEncoder xsi:type="enc:SAML1StringNameIdentifier"
> nameFormat="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent" />
>     <resolver:AttributeEncoder xsi:type="enc:SAML2StringNameID"
> nameFormat="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent" />
>   </resolver:AttributeDefinition>
>
>   <!-- The usual Data Connector -->
>   <resolver:DataConnector xsi:type="dc:StoredId" id="SQLPersistentId"
>     generatedAttributeID="StoredPersistentId" ...etc...
>
> HTH,
> -pter
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170704/cd6f6463/attachment.html>