Persistent NameID format with an attribute as NameID value

[Cantor, Scott]

> How would I get the IdP to use an attribute-sourced Name ID
> generator that sends an attribute as the Name ID but with a
> format of persistent?

A persistent NameID is covered by https://shibboleth.atlassian.net/wiki/spaces/IDP5/pages/3199507892/PersistentNameIDGenerationConfiguration

(plus the usual issue of telling the IdP to pick that Format of NameID)

The "other" option is the approach used for the pairwise-id Attribute or OpenID pairwise sub claim, which is usually done with the ComputedId connector and then taking the value and doing the usual things with the result to produce an AttributDefinition on top of that, usually via Scoped to add the domain suffix.

Neither one of those produces an Attribute with a NameID as a value, and we do not intend anybody do that anymore. That's dead code and is undocumented.

I do not believe for one second that much out there actually requires that, and I most definitely would never trust somebody's word that they did without seeing the code or testing myself.

And even then I would never do it.

-- Scott