PersistentNameIDGenerationConfiguration: Type 4 UUID

[Cantor, Scott]

> So on longer term -- if we wish to leverage persistence ID (i.e. unique to the
> user per IdP/SP combination) --- where available both as SAML2String and as
> a SAML2NameID -- what is the best configuration option?

Supporting the new attributes is going to necessitate doing it all in the resolver so that is likely it. The NameID support in the IdP is about commercial SAML integrations, none of which will ever rely on any form of pairwise ID.

-- Scott