<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif;">
<div><br>
</div>
<span id="OLK_SRC_BODY_SECTION">
<div style="font-family:Calibri; font-size:11pt; text-align:left; color:black; BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: #b5c4df 1pt solid; BORDER-RIGHT: medium none; PADDING-TOP: 3pt">
<span style="font-weight:bold">From: </span>users <<a href="mailto:users-bounces@shibboleth.net">users-bounces@shibboleth.net</a>> on behalf of "Cantor, Scott" <<a href="mailto:cantor.2@osu.edu">cantor.2@osu.edu</a>><br>
<span style="font-weight:bold">Reply-To: </span>Shib Users <<a href="mailto:users@shibboleth.net">users@shibboleth.net</a>><br>
<span style="font-weight:bold">Date: </span>Thursday, March 17, 2016 at 10:54<br>
<span style="font-weight:bold">To: </span>Shib Users <<a href="mailto:users@shibboleth.net">users@shibboleth.net</a>><br>
<span style="font-weight:bold">Subject: </span>RE: IdPv3 - eduPersonTargetedID - How to define and release this attribute?<br>
</div>
<div><br>
</div>
<div>
<div>
<blockquote id="MAC_OUTLOOK_ATTRIBUTION_BLOCKQUOTE" style="BORDER-LEFT: #b5c4df 5 solid; PADDING:0 0 0 5; MARGIN:0 0 0 5;">
<div>What I am really interested in is configuring IdPv3 to support the global R&S</div>
<div>category.</div>
<div>The information I have read[1][2] suggests that eduPersonTargetedID is</div>
<div>recommended and possibly required to be released to support this category</div>
<div>if ePPN doesn't fit certain criteria.</div>
</blockquote>
<div><br>
</div>
<div>You probably should read this [1] if you don't know the backstory of ePTID. It is written from an SP perspective and covers a somewhat separate set of issues, but it discussed the interplay involved here. The thing you're asking about is the thing in the
section labeled "SAML 2.0 Attribute" and the thing I'm talking about is before it in the section called "SAML 2.0 NameID".</div>
<div><br>
</div>
<div>I don't believe that you need to support eduPersonTargetedID in attribute form to support R&S, using a persistent NameID should be fine. I also suspect that isn't clear from R&S itself.</div>
</div>
</div>
</span>
<div><br>
</div>
<div>> I believe Scott is correct. The Global R&S requirement is really for the IdP to assert a persistent, non-reassignable identifier. If the IdP re-assigns ePPNs, then it needs to provide a different identifier. What it's called shouldn't matter, but maybe
some edits to Global R&S could clarify this. Also too bad we didn't include advice like this in the just-released eduPerson (201602). Or maybe we could do a (201602bis). </div>
<div> --Keith</div>
<span id="OLK_SRC_BODY_SECTION">
<div>
<div>
<div><br>
</div>
<div>-- Scott</div>
<div><br>
</div>
<div>[1] <a href="https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPTargetedID">
https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPTargetedID</a></div>
<div><br>
</div>
<div>-- </div>
<div>To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">
users-unsubscribe@shibboleth.net</a></div>
<div><br>
</div>
</div>
</div>
</span>
</body>
</html>