eduPersonTargetedID not being sent as persistent
Cantor, Scott
cantor.2 at osu.edu
Thu Jan 9 19:12:19 EST 2020
That is not a NameID. That's a an Attribute with a NameID as a value.
Persistent NameID generation is here:
https://wiki.shibboleth.net/confluence/display/IDP30/PersistentNameIDGenerationConfiguration
NameID Format selection (to get it to use "persistent") is here:
https://wiki.shibboleth.net/confluence/display/IDP30/NameIDGenerationConfiguration
For an InCommon service, you have two options to get format selection to work:
- create a relying party override with a nameIDFormatPrecedence setting, documented at length with numerous examples throughout the wiki
- add a NameIDFormat MetadataFilter to the InCommon metadata configuration to add the format to the relevant SP metadata
-- Scott
More information about the users
mailing list