eduPersonTargetedID not being sent as persistent

Cantor, Scott cantor.2 at osu.edu
Thu Jan 9 19:12:19 EST 2020


That is not a NameID. That's a an Attribute with a NameID as a value.

Persistent NameID generation is here:
https://wiki.shibboleth.net/confluence/display/IDP30/PersistentNameIDGenerationConfiguration

NameID Format selection (to get it to use "persistent") is here:
https://wiki.shibboleth.net/confluence/display/IDP30/NameIDGenerationConfiguration

For an InCommon service, you have two options to get format selection to work:

- create a relying party override with a nameIDFormatPrecedence setting, documented at length with numerous examples throughout the wiki
- add a NameIDFormat MetadataFilter to the InCommon metadata configuration to add the format to the relevant SP metadata

-- Scott





More information about the users mailing list