eduPersonTargetedId

[IAM David Bantz]

We use eduPersonUniqueId for unchanging assigned identifier based on the
numeric identifier assigned all persons in our ERP;
"forever" is too long to guarantee, but well established business practices
maintain that identifier indefinitely regardless
of changes in status or other identifiers assigned to that person. While
less familiar to vended service providers, several have
agreed to rely on ePUId rather than ePPN or other identifiers as the
underlying key for users precisely because we do assure
continued validity and no reassignment of the identifier. We generally
release it as an attribute rather than using for NameID in the subject.

David Bantz
UA OIT IAM

On Fri, Nov 10, 2017 at 1:53 AM, Peter Schober <peter.schober at univie.ac.at>
wrote:

> * Hugo Slavia <hugoslavia101 at gmail.com> [2017-11-10 05:38]:
> > For the interim --- if we wish to transmit a persistent id (immutable for
> > the user) -- would there be a suitable oid attribute?
>
> I don't know what specific aspects you're after with "immutable", but
> if that means "a given subject will forever be identified by this
> attribute value" then I doubt many IDP organizations will be able or
> willing to support such an identifier.
>
> -peter
> --
> For Consortium Member technical support, see https://wiki.shibboleth.net/
> confluence/x/coFAAg
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20171110/50f08b19/attachment.html>