~Re: Storing persistentId using an HTTP DataConnector

Peter Schober peter.schober at univie.ac.at
Tue Nov 8 15:55:56 UTC 2022


* spf via users <users at shibboleth.net> [2022-11-08 16:30]:
> The only thing I can't undersand for now is how to have a persistent
> NameID in the SAML assertions. If the SAML2PersistentGenerator only
> is enabled, there is even no subject. But if SAML2TransientGenerator
> or both are enabled, I have a 

In my conf/saml-nameid.xml within <util:list
id="shibboleth.SAML2NameIDGenerators"> I have multiple *Generator
elements, all "active" in the configuration and used when needed
(based on the NameID selection process Nate pointed you to):

<util:list id="shibboleth.SAML2NameIDGenerators">
  <ref bean="shibboleth.SAML2TransientGenerator" />
  <ref bean="shibboleth.SAML2PersistentGenerator" />
  <bean parent="shibboleth.SAML2AttributeSourcedGenerator" ...
  <bean parent="shibboleth.SAML2AttributeSourcedGenerator" ...
  <bean parent="shibboleth.SAML2AttributeSourcedGenerator" ...
</util:list>

HTH,
-peter


More information about the users mailing list