Pre-Provisioning eduPersonUniqueId identities

[Ullfig, Roberto Alfredo]

Ah nevermind, I mixed up eduPersonUniqueId and eduPersonTargetedID - but what if the request was for the latter attribute?

---
Roberto Ullfig - rullfig at uic.edu
Systems Administrator
Enterprise Applications & Services | Technology Solutions
University of Illinois - Chicago
________________________________
From: Ullfig, Roberto Alfredo
Sent: Thursday, March 30, 2023 10:39 AM
To: Shib Users <users at shibboleth.net>
Subject: Pre-Provisioning eduPersonUniqueId identities

We have a request from a service provider to pre-provision accounts based on the eduPersonUniqueId attribute but this seems to me to break much of the security that the attribute provides. Basically, they would want to know the corresponding value associated with a UIN. Any opinions?

---
Roberto Ullfig - rullfig at uic.edu
Systems Administrator
Enterprise Applications & Services | Technology Solutions
University of Illinois - Chicago
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20230330/ba5c3050/attachment.htm>