<div dir="ltr">Thanks, Peter. This looks good; I'll try it and get back to you.<div><br></div><div class="gmail_extra"><br clear="all"><div><div class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div style="font-size:12.8px"><span style="font-size:12.8px">--</span></div><div style="font-size:12.8px"><span style="font-size:12.8px">Kylie Lunghusen</span><br></div><div><font size="1" face="arial, helvetica, sans-serif">Technical Tools Administrator, University Operations</font></div><div><font size="1" face="arial, helvetica, sans-serif">Information Technology Services, RMIT University</font></div></div></div></div></div></div></div></div></div></div></div></div></div>
<br><div class="gmail_quote">On 4 July 2017 at 01:18, Peter Schober <span dir="ltr"><<a href="mailto:peter.schober@univie.ac.at" target="_blank">peter.schober@univie.ac.at</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">* Kylie Lunghusen <<a href="mailto:kylie.lunghusen@rmit.edu.au">kylie.lunghusen@rmit.edu.au</a>> [2017-07-03 05:05]:<br>
> I've inherited the running of our Shibboleth IdP, and I can't get<br>
> persistentID-via-<wbr>eduPersonTargetedID working properly. Shibboleth version<br>
> is 2.4.4 (yes I know; upgrade project is underway but will take a while).<br>
<br>
Here's a complete, working example:<br>
<br>
  <!-- Attribute form, deprecated for SAML2 use --><br>
  <resolver:AttributeDefinition id="eduPersonTargetedID" xsi:type="ad:SAML2NameID"<br>
    nameIdFormat="urn:oasis:names:<wbr>tc:SAML:2.0:nameid-format:<wbr>persistent" sourceAttributeID="<wbr>StoredPersistentId"><br>
    <resolver:Dependency ref="SQLPersistentId" /><br>
    <resolver:AttributeEncoder xsi:type="enc:SAML1XMLObject" name="urn:oid:1.3.6.1.4.1.<wbr>5923.1.1.1.10" /><br>
    <resolver:AttributeEncoder xsi:type="enc:SAML2XMLObject" name="urn:oid:1.3.6.1.4.1.<wbr>5923.1.1.1.10" friendlyName="<wbr>eduPersonTargetedID" /><br>
  </resolver:<wbr>AttributeDefinition><br>
<br>
  <!-- <a href="https://spaces.internet2.edu/display/SHIB2/IdPPersistentNameIdentifier" rel="noreferrer" target="_blank">https://spaces.internet2.edu/<wbr>display/SHIB2/<wbr>IdPPersistentNameIdentifier</a> --><br>
  <resolver:AttributeDefinition xsi:type="ad:Simple" id="persistentId" sourceAttributeID="<wbr>StoredPersistentId"><br>
    <resolver:Dependency ref="SQLPersistentId" /><br>
    <resolver:AttributeEncoder xsi:type="enc:<wbr>SAML1StringNameIdentifier" nameFormat="urn:oasis:names:<wbr>tc:SAML:2.0:nameid-format:<wbr>persistent" /><br>
    <resolver:AttributeEncoder xsi:type="enc:<wbr>SAML2StringNameID" nameFormat="urn:oasis:names:<wbr>tc:SAML:2.0:nameid-format:<wbr>persistent" /><br>
  </resolver:<wbr>AttributeDefinition><br>
<br>
  <!-- The usual Data Connector --><br>
  <resolver:DataConnector xsi:type="dc:StoredId" id="SQLPersistentId"<br>
    generatedAttributeID="<wbr>StoredPersistentId" ...etc...<br>
<br>
HTH,<br>
-pter<br>
<span class="HOEnZb"><font color="#888888">--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.<wbr>net</a><br>
</font></span></blockquote></div><br></div></div>