PersistentNameIDGenerationConfiguration: Type 4 UUID

[Peter Schober]

* Hugo Slavia <hugoslavia101 at gmail.com> [2018-01-28 05:18]:
> On a separate note -- there appears to be some sadness over at my
> institution that EPTI are deprecated -- what is the backstory behind
> this?

Don't worry, the attribute form of eduPersonTargetID is being
deprecated together with what should have been its replacement in
SAML2.0 (the NameID -- i.e., the attribute /value/ of an
eduPersonTargetID attribute -- sent in the SAML Assertion's Subject),
so *both* are on the way out.
Together with eduPersonUniqueID and (possibly) eduPersonPrincipalName.

See section 2.1 of the

  SAML V2.0 Subject Identifier Attributes Profile
  https://wiki.oasis-open.org/security/SAMLSubjectIDAttr

Some background can also be found in this (out of date) write-up in
the wiki:

  https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPTargetedID

You'll note that the "botched" version (also called "broken", "a bug
and a mistake" in that text and comments) is what the new Subject-ID
(spec linked to above) will look like. So we've come full circle on
this.

-peter