IDP 4.1.5 Nameid

[Mathew, Sunil]

Hi,

I had the following configuration for NameId in IdP 3.1.1. Can you please let me know the equivalent in 4.1.5 (especially attribute-resolver.xml).

attribute-filter.xml:

    <!-- ============================================== -->

    <!--      Canvas INT                                -->

    <!-- ============================================== -->

       <afp:AttributeFilterPolicy>

        <afp:PolicyRequirementRule xsi:type="basic:AttributeRequesterString" value="http://hbs-int.instructure.com/saml2" />



        <afp:AttributeRule attributeID="persistentNameIdSourceUid">

            <afp:PermitValueRule xsi:type="basic:ANY" />

        </afp:AttributeRule>



       </afp:AttributeFilterPolicy>


attribute-resolver.xml:
    <!-- ===================START Canvas================== -->
    <resolver:AttributeDefinition id="persistentNameIdSourceUid" xmlns="urn:mace:shibboleth:2.0:resolver:ad" xsi:type="PrincipalName">
        <resolver:AttributeEncoder xsi:type="SAML1StringNameIdentifier" xmlns="urn:mace:shibboleth:2.0:attribute:encoder" nameFormat="urn:mace:shibboleth:1.0:nameIdentifier" />
        <resolver:AttributeEncoder xsi:type="SAML2StringNameID" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"  nameFormat="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent" />
    </resolver:AttributeDefinition>
    <!-- ===================END Canvas================== -->


relying-party.xml:
        <!-- Canvas INT -->
        <bean parent="RelyingPartyByName" c:relyingPartyIds="http://hbs-int.instructure.com/saml2">
            <property name="profileConfigurations">
                <list>
                                  <bean parent="SAML2.SSO" p:nameIDFormatPrecedence="urn:oasis:names:tc:SAML:2.0:nameid-format:transient" />
                </list>
            </property>
        </bean>


idp.properties:
idp.additionalProperties= /conf/ldap.properties, /conf/saml-nameid.properties, /conf/services.properties


saml-nameid.properties:
idp.nameid.saml2.legacyGenerator = shibboleth.LegacySAML2NameIDGenerator
idp.nameid.saml1.legacyGenerator = shibboleth.LegacySAML1NameIdentifierGenerator


services.properties:
idp.service.nameidGeneration.checkInterval = PT15M


I was not able to find the appropriate documentation for legacy nameid generation. Any help would be appreciated.

Regards,
Sunil

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20220318/b0fa56e5/attachment.htm>