Resurrection: eduPersonTargettedId (Shibboleth v2)
Joshua Brodie
josbrodie at gmail.com
Wed Jan 23 22:12:10 EST 2019
Blast from the past. We have a long forgotten SP that wishes to find out
users on our deprecated v2 Shibboleth.
They used the legacy eduPersonTargetedID in Shib2 -- and have stored the
values for users.
We know who have access the SP by their uid from the logs.
What I am not sure is how to generate the targetedtId from the uid (outside
of the long gone v2 instance)? Desired outcome: we sent the list of
uid/eduPersonTargetedId mapping to the SP -- that they can find out who
used their site (for a security follow-up).
The following is how we had configured the generation of the sent value (I
have the salt).
<resolver:DataConnector id="mystoredhashedid" xsi:type="ComputedId" xmlns=
"urn:mace:shibboleth:2.0:resolver:dc"
generatedAttributeID="targetedID"
sourceAttributeID="uid"
salt="foobar">
<resolver:Dependency ref="dbmain" />
</resolver:DataConnector>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20190123/bd300385/attachment.html>
More information about the users
mailing list