EduPersonTargetedId

[Hugo Slavia]

Hello:

Our University is embarking on having multiple cloud vendors. The audit
office has requested that majority of the cloud vendors only have an opaque
unique persistent identifier, for the users, for that service.

Researching the subject -- it would appear that EduPersonTargetedId can fit
the bill -- e.g. https://www.switch.ch/aai/guides/sp/persistentid/

But separately researching -- it could appear that EPTI could be deprecated
-- http://shibboleth.net/pipermail/users/2017-July/036852.html

So the question boils down to:

1) Can we use eduPersonTargetedId as below

<resolver:AttributeDefinition id="eduPersonTargetedID"
xsi:type="ad:SAML2NameID" sourceAttributeID="persistentID">
            <resolver:Dependency ref="myStoredId" />
            <resolver:AttributeEncoder xsi:type="enc:SAML2XMLObject"
name="urn:oid:1.3.6.1.4.1.5923.1.1.1.10" friendlyName="eduPersonTargetedID"
/>
        </resolver:AttributeDefinition>

2) We have Persistent ID also released as a NameID -- but not all vendors
accept NameIDs.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20180115/ccca7883/attachment-0001.html>