StoredID data connecter vs SAML2Persistent

[Peter Schober]

* Liam Hoekenga <liamr at umich.edu> [2018-06-26 16:41]:
> Is it possible to still support eduPersonTargetedID using the new nameID
> stuff?

Depends what you mean by that, I guess. You'd do it in the attribute
resolver (not within conf/saml-nameid.xml), but of course you can
re-use the properties defined in conf/saml-nameid.properties:

<!-- Deprecated persistent NameID wrapped in a deprecated SAML Attribute value -->
<AttributeDefinition id="eduPersonTargetedID" xsi:type="SAML2NameID" nameIdFormat="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent" sourceAttributeID="computedID">
  <Dependency ref="computedID" />
  <AttributeEncoder xsi:type="SAML1XMLObject" name="urn:oid:1.3.6.1.4.1.5923.1.1.1.10" encodeType="false" />
  <AttributeEncoder xsi:type="SAML2XMLObject" name="urn:oid:1.3.6.1.4.1.5923.1.1.1.10" friendlyName="eduPersonTargetedID" encodeType="false" />
</AttributeDefinition>

<!-- Matching ComputedId connector https://wiki.shibboleth.net/confluence/display/IDP30/ComputedIdConnector -->
<DataConnector id="computedID" xsi:type="ComputedId" generatedAttributeID="computedID" encoding="BASE32"
               sourceAttributeID="%{idp.persistentId.sourceAttribute}" salt="%{idp.persistentId.salt}">
    <Dependency ref="myLDAP" />
</DataConnector>

-peter