<div dir="ltr"><div class="gmail_extra"><br><div class="gmail_quote">On Tue, Oct 20, 2015 at 10:28 AM, Cantor, Scott <span dir="ltr"><<a href="mailto:cantor.2@osu.edu" target="_blank">cantor.2@osu.edu</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"><div id=":415" class="" style="overflow:hidden">That's not any form of ePTID that ever existed.<br></div></blockquote></div><br>A combination of them updating our metadata and us using the right definition for ePTID seems to have done it:</div><div class="gmail_extra"><div class="gmail_extra">    <resolver:AttributeDefinition xsi:type="ad:SAML2NameID" id="eduPersonTargetedID"</div><div class="gmail_extra">                                  nameIdFormat="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent" sourceAttributeID="computedID"></div><div class="gmail_extra">        <resolver:Dependency ref="StoredIDConnector" /></div><div class="gmail_extra">        <resolver:AttributeEncoder xsi:type="enc:SAML1XMLObject" name="urn:oid:1.3.6.1.4.1.5923.1.1.1.10" /></div><div class="gmail_extra">        <resolver:AttributeEncoder xsi:type="enc:SAML2XMLObject" name="urn:oid:1.3.6.1.4.1.5923.1.1.1.10" friendlyName="eduPersonTargetedID" /></div><div class="gmail_extra">    </resolver:AttributeDefinition></div><div class="gmail_extra"><br></div><div class="gmail_extra">Our signing key didn't change with the upgrade.. not sure why it didn't work w/o the metadata update.</div><div class="gmail_extra"><br></div><div class="gmail_extra">Any suggestions on getting vendors who want to use the attribute version of ePTID to move away from it (since the IdPv3 support for ePTID is deprecated)?</div><div class="gmail_extra"><br></div><div class="gmail_extra">Liam</div></div></div>