How do i get eduPersonTargetedID to be the same as the persistent NameID ?

Peter Schober peter.schober at univie.ac.at
Thu Jun 13 12:06:53 EDT 2019


* Peter Schober <peter.schober at univie.ac.at> [2019-06-13 16:55]:
> >     <!-- SAML 2 NameID Generation -->
> >     <util:list id="shibboleth.SAML2NameIDGenerators">
> > 
> >         <ref bean="shibboleth.SAML2TransientGenerator" />
> > 
> >         <!-- Uncommenting this bean requires configuration in saml-nameid.properties. -->
> >         <ref bean="shibboleth.SAML2PersistentGenerator" />
> >         <bean parent="shibboleth.SAML2AttributeSourcedGenerator"
> >             p:omitQualifiers="true"
> >             p:format="urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress"
> >             p:attributeSourceIds="#{ {'computedID'} }" />
> >     </util:list>
> 
> This is nonsense

It's not, sorry. The SAML2PersistentGenerator is fine.

I may have an opinion in the additional SAML2AttributeSourcedGenerator
but that doesn't matter for the question here (unless your intention
was that it somehow related to this question).

-peter


More information about the users mailing list