Persistent ID via eduPersonTargetedID in IdP 2.4.4

[Kylie Lunghusen]

Thanks for your help Peter; this fixed the problem.

I'm guessing the "we use ePTID for persistent" instruction in handover was
intended for persistent-as-an-attribute and not for Name IDs (assuming I
understand what I've been reading).

Have a good one,


--
Kylie Lunghusen
Technical Tools Administrator, University Operations
Information Technology Services, RMIT University

On 4 July 2017 at 12:14, Kylie Lunghusen <kylie.lunghusen at rmit.edu.au>
wrote:

> Thanks, Peter. This looks good; I'll try it and get back to you.
>
>
> --
> Kylie Lunghusen
> Technical Tools Administrator, University Operations
> Information Technology Services, RMIT University
>
> On 4 July 2017 at 01:18, Peter Schober <peter.schober at univie.ac.at> wrote:
>
>> * Kylie Lunghusen <kylie.lunghusen at rmit.edu.au> [2017-07-03 05:05]:
>> > I've inherited the running of our Shibboleth IdP, and I can't get
>> > persistentID-via-eduPersonTargetedID working properly. Shibboleth
>> version
>> > is 2.4.4 (yes I know; upgrade project is underway but will take a
>> while).
>>
>> Here's a complete, working example:
>>
>>   <!-- Attribute form, deprecated for SAML2 use -->
>>   <resolver:AttributeDefinition id="eduPersonTargetedID"
>> xsi:type="ad:SAML2NameID"
>>     nameIdFormat="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent"
>> sourceAttributeID="StoredPersistentId">
>>     <resolver:Dependency ref="SQLPersistentId" />
>>     <resolver:AttributeEncoder xsi:type="enc:SAML1XMLObject"
>> name="urn:oid:1.3.6.1.4.1.5923.1.1.1.10" />
>>     <resolver:AttributeEncoder xsi:type="enc:SAML2XMLObject"
>> name="urn:oid:1.3.6.1.4.1.5923.1.1.1.10" friendlyName="eduPersonTargetedID"
>> />
>>   </resolver:AttributeDefinition>
>>
>>   <!-- https://spaces.internet2.edu/display/SHIB2/IdPPersistentName
>> Identifier -->
>>   <resolver:AttributeDefinition xsi:type="ad:Simple" id="persistentId"
>> sourceAttributeID="StoredPersistentId">
>>     <resolver:Dependency ref="SQLPersistentId" />
>>     <resolver:AttributeEncoder xsi:type="enc:SAML1StringNameIdentifier"
>> nameFormat="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent" />
>>     <resolver:AttributeEncoder xsi:type="enc:SAML2StringNameID"
>> nameFormat="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent" />
>>   </resolver:AttributeDefinition>
>>
>>   <!-- The usual Data Connector -->
>>   <resolver:DataConnector xsi:type="dc:StoredId" id="SQLPersistentId"
>>     generatedAttributeID="StoredPersistentId" ...etc...
>>
>> HTH,
>> -pter
>> --
>> To unsubscribe from this list send an email to
>> users-unsubscribe at shibboleth.net
>>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170706/b13f4337/attachment.html>