Instructions to release a persistent ePTID

[Koren, Meshna (ELS-AMS)]

Aloha,

Our SP uses a persistent NameID (in subject assertion) or a persistent ePTID (in attribute assertion) for personalization. Although an SP3, this is still valid for us:
https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPTargetedID#NativeSPTargetedID-XMLSyntaxandFormalNames

A persistent NameID in subject assertion is relatively simple but we're occasionally having problems with IdPs that release ePTID but not in a persistent format... and would release it like this, for example:

<saml:Attribute Name="urn:mace:dir:attribute-def:eduPersonTargetedID">
<saml:AttributeValue>7665xxxxxxxxxxx40dac495f7c0b2287f6f5776747</saml:AttributeValue>

and we don't know how to help them.

Is there a wiki page that helps an IdP to configure Shibboleth to release a persistent eduPersonTargetedID that we can point them to? We can find bits of information (on IdP2 wiki) but don't really know what's a proper starting point.

Also... we know ePTID is being deprecated so not expecting any new wikis to be put up to address this...  we're just not ready to dump its support quite yet.

Thanks,
Meshna



Meshna Koren

Associate Product Manager
Product Management - Identity and Access - Research Products

Elsevier BV
Radarweg 29, Amsterdam 1043 NX, The Netherlands
m.koren at elsevier.com<mailto:m.koren at elsevier.com>

Federated Access - SAML, Shibboleth, Corporate SSO, OpenAthens, Institutional Login





________________________________

Elsevier B.V. Registered Office: Radarweg 29, 1043 NX Amsterdam, The Netherlands, Registration No. 33156677, Registered in The Netherlands.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20191126/01713610/attachment.html>