ePTID and ComputedId Persistence After IdP 3.3 -> 3.4 Upgrade

Cantor, Scott cantor.2 at osu.edu
Mon Feb 3 14:35:01 EST 2020


> The documentation for the ComputedIdConnector at
> indicates that, as of version 3.4, the sourceAttriubteID data connector attribute
> has been deprecated.

You just move into the modern InputAttributeDefinition or InputDataConnector syntax and specify the source attribute explicitly that way, that's all. The deprecation is just the syntax, nothing functional. We got rid of all the occurrences of sourceAttributeId that were in the top level elements.

> Also, would switching to using
> the properties instead of the data connector defined sourceAttributeID change
> the behavior of the data sent by the
> shibboleth.SAML2AttributeSourcedGenerator, for which we have a number of
> attributeSourceIds defined in the saml-nameid.xml file?

The properties in that file have no relevance to the generator that's based on attributes. The properties control persistent NameID generation and that generator is for custom NameIDs using other formats. The properties are used because we auto-configure the persistent NameID generator beans internally instead of exposing them in the XML file, whereas the AttributeSourcedGenerator beans are actually configured by you directly (unless you create your own properties to use).

-- Scott



More information about the users mailing list