Persistent ID instead of Transient Name ID

[Melvin Lasky]

Hey everyone,
	In all my time of using shibboleth, I’ve never had a vendor say they want 0 attributes. But, alas, that’s what I’m faced with this week. However, they do want a persistent ID that’s non-identifiable to a person? I’m not even sure how this would be possible, hence why I’m here asking. LOL

Any help will be greatly appreciated…

This is what they asked for: "Do you have the option to send an opaque, unique, and unchanging user identifier? "

Also in their metadata they have:
    <NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified</NameIDFormat>
    <NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress</NameIDFormat>
    <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</NameIDFormat>
    <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>

Which I don’t understand, LOL.

Thanks

Mel

Melvin Lasky
Associate Director of Enterprise Architecture





Riverdale, NY 10471
Phone: 718-862-7410
melvin.lasky at manhattan.edu
www.manhattan.edu


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20230111/a933e78e/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 1.jpeg
Type: image/jpeg
Size: 3547 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/users/attachments/20230111/a933e78e/attachment.jpeg>