Shibboleth eduPersonTargetedID issue

[Cantor, Scott]

On 7/19/17, 8:12 AM, "users on behalf of luiz1361" <users-bounces at shibboleth.net on behalf of luiz.martins at griffith.ie> wrote:

> Make sure you have this on your attribute-resolver.xml:
>   <AttributeDefinition xsi:type="SAML2NameID" id="eduPersonTargetedID"
> sourceAttributeID="persistentID"
> nameIdFormat="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent">

Make sure you don't, unless you want to continue supporting NameID-valued SAML Attributes, which you shouldn't generally need to do or want to do. It's a deprecated feature. It may or may not survive into 4.0.
 
You don't need anything in the resolver to support persistent NameIDs.

A lot of the rest looked far more than should normally be needed in the latest releases. You just need to define a data source and set some properties, and uncomment the generator, that's pretty much it.

-- Scott