IDP V - 4.3.1 Deprecated SAML2NameID

[Ramaiah, Vanna G.]

After the IDP upgrade, I see this warning message.
WARN [DEPRECATED:128] - xsi:type 'SAML2NameID', (file [/opt/shibboleth-idp/conf/attribute-resolver.xml]): This will be removed in the next major version of this software;

This is what I have in attribute-resolver.

<DataConnector id="ComputedIDConnector" xsi:type="ComputedId"
    generatedAttributeID="ComputedID"
    salt="xyz"
    encoding="BASE32">
    <InputDataConnector ref="myAD" attributeNames="mail" />
</DataConnector>

<AttributeDefinition id="eduPersonTargetedID" xsi:type="SAML2NameID" nameIdFormat="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent">
   <InputDataConnector ref="ComputedIDConnector" attributeNames="ComputedID"/>
   <DisplayName xml:lang="en">eduPersonTargetedID</DisplayName>
   <AttributeEncoder xsi:type="SAML1XMLObject" name="urn:oid:1.3.6.1.4.1.5923.1.1.1.10" encodeType="false" />
   <AttributeEncoder xsi:type="SAML2XMLObject" name="urn:oid:1.3.6.1.4.1.5923.1.1.1.10"   friendlyName="eduPersonTargetedID"  encodeType="false" />
</AttributeDefinition>

In saml-nameid.xml, I will enable the persistent generator.

<util:list id="shibboleth.SAML2NameIDGenerators">
        <ref bean="shibboleth.SAML2TransientGenerator" />
        <ref bean="shibboleth.SAML2PersistentGenerator" />

        <!--
        <bean parent="shibboleth.SAML2AttributeSourcedGenerator"
            p:omitQualifiers="true"
            p:format="urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress"
            p:attributeSourceIds="#{ {'mail'} }" />
        -->
</util:list>

In saml-nameid.properties,

idp.persistentId.sourceAttribute = mail
idp.persistentId.useUnfilteredAttributes = true
idp.persistentId.algorithm = SHA
idp.persistentId.salt = salt
idp.persistentId.encoding = BASE32

In attribute-resolver,
Change xsi:type="SAML2NameID" to xsi:type="String"

Is this a correct approach? Where would I keyin the data connector information?




-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20230718/5fa16008/attachment.htm>