eduPersonTargetedId

[Peter Schober]

* Hugo Slavia <hugoslavia101 at gmail.com> [2017-11-10 05:38]:
> For the interim --- if we wish to transmit a persistent id (immutable for
> the user) -- would there be a suitable oid attribute?

If you're asking whether there is an alternative valid, recognized,
interoperable on-the-wire encoding/serialisation of the SAML 2.0
persistent NameIDs as defined in SAML core 8.3.7 (read the spec to
find out whether its specific properties are even what you're after)
the answer is NO.

For more general questions about the different properties of
identifiers including mappings for example identifiers see:
https://wiki.shibboleth.net/confluence/display/CONCEPT/NameIdentifiers

I don't know what specific aspects you're after with "immutable", but
if that means "a given subject will forever be identified by this
attribute value" then I doubt many IDP organizations will be able or
willing to support such an identifier.

-peter