Attribute definition type for eduPersonTargetedID?

[Wessel, Keith]

Thanks, Scott. Yes, I realize that eduPersonTargetedID and the persistent NameID have the same value. Do I understand you correctly, though, that there's no way to release that value in an attribute with the same name and encoding as has been used for eduPersonTargetedID? It can only be released as a name ID?

If so, why isn't this a bigger deal for others? 

Keith


-----Original Message-----
From: users <users-bounces at shibboleth.net> On Behalf Of Cantor, Scott
Sent: Monday, July 26, 2021 9:13 AM
To: Shib Users <users at shibboleth.net>
Subject: Re: Attribute definition type for eduPersonTargetedID?

On 7/26/21, 10:04 AM, "users on behalf of Wessel, Keith" <users-bounces at shibboleth.net on behalf of kwessel at illinois.edu> wrote:

>    I didn't actually say they only support eptid. I said they need it, 
> and I say need because it's what they're currently using as a unique identifier.

Persistent ID is the *same* identifier. This is not about identifier migration, which is hard, it's just about syntax.

> We can certainly start migrating them to a new attribute, but that's 
> obviously not a trivial process

If the value is the same, it should be very trivial.

>    But since eptid is part of the R&S bundle, the impacts of this 
> could be more far reaching than just local SPs that use it as a unique identifier, and simply replacing it with something else is likely to break a lot.

R&S also assumes use of the persistent NameID Format, because that's in fact what eduPersonTargetedID *is* in any recent version of the eduPerson spec.

>  I'm all for migrating to the new identifier attributes as soon as we 
> can, but I know that's going to take some time, and I'd like to 
> continue supporting it with an attribute definition that doesn't use a deprecated type. Is there a way?

No.

-- Scott


--
For Consortium Member technical support, see https://urldefense.com/v3/__https://shibboleth.atlassian.net/wiki/x/ZYEpPw__;!!DZ3fjg!qZ2LeWVu8bAJzjMW_BBdDmvfR3fD05kHPveYmWg8Oab6Qhvs7ajTAtto0FYt4utd1A$
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net