<div dir="ltr">Thanks for your help Peter; this fixed the problem.<div><br></div><div>I'm guessing the "we use ePTID for persistent" instruction in handover was intended for persistent-as-an-attribute and not for Name IDs (assuming I understand what I've been reading).</div><div><br></div><div>Have a good one,</div><div><br><div class="gmail_extra"><br clear="all"><div><div class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div style="font-size:12.8px"><span style="font-size:12.8px">--</span></div><div style="font-size:12.8px"><span style="font-size:12.8px">Kylie Lunghusen</span><br></div><div><font size="1" face="arial, helvetica, sans-serif">Technical Tools Administrator, University Operations</font></div><div><font size="1" face="arial, helvetica, sans-serif">Information Technology Services, RMIT University</font></div></div></div></div></div></div></div></div></div></div></div></div></div>
<br><div class="gmail_quote">On 4 July 2017 at 12:14, Kylie Lunghusen <span dir="ltr"><<a href="mailto:kylie.lunghusen@rmit.edu.au" target="_blank">kylie.lunghusen@rmit.edu.au</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Thanks, Peter. This looks good; I'll try it and get back to you.<div><br></div><div class="gmail_extra"><br clear="all"><div><div class="m_-1451965564916131264gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div style="font-size:12.8px"><span style="font-size:12.8px">--</span></div><div style="font-size:12.8px"><span style="font-size:12.8px">Kylie Lunghusen</span><br></div><div><font size="1" face="arial, helvetica, sans-serif">Technical Tools Administrator, University Operations</font></div><div><font size="1" face="arial, helvetica, sans-serif">Information Technology Services, RMIT University</font></div></div></div></div></div></div></div></div></div></div></div></div></div>
<br><div class="gmail_quote">On 4 July 2017 at 01:18, Peter Schober <span dir="ltr"><<a href="mailto:peter.schober@univie.ac.at" target="_blank">peter.schober@univie.ac.at</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">* Kylie Lunghusen <<a href="mailto:kylie.lunghusen@rmit.edu.au" target="_blank">kylie.lunghusen@rmit.edu.au</a>> [2017-07-03 05:05]:<br>
> I've inherited the running of our Shibboleth IdP, and I can't get<br>
> persistentID-via-eduPersonTarg<wbr>etedID working properly. Shibboleth version<br>
> is 2.4.4 (yes I know; upgrade project is underway but will take a while).<br>
<br>
Here's a complete, working example:<br>
<br>
<!-- Attribute form, deprecated for SAML2 use --><br>
<resolver:AttributeDefinition id="eduPersonTargetedID" xsi:type="ad:SAML2NameID"<br>
nameIdFormat="urn:oasis:names:<wbr>tc:SAML:2.0:nameid-format:pers<wbr>istent" sourceAttributeID="StoredPersi<wbr>stentId"><br>
<resolver:Dependency ref="SQLPersistentId" /><br>
<resolver:AttributeEncoder xsi:type="enc:SAML1XMLObject" name="urn:oid:1.3.6.1.4.1.5923<wbr>.1.1.1.10" /><br>
<resolver:AttributeEncoder xsi:type="enc:SAML2XMLObject" name="urn:oid:1.3.6.1.4.1.5923<wbr>.1.1.1.10" friendlyName="eduPersonTargete<wbr>dID" /><br>
</resolver:AttributeDefinition<wbr>><br>
<br>
<!-- <a href="https://spaces.internet2.edu/display/SHIB2/IdPPersistentNameIdentifier" rel="noreferrer" target="_blank">https://spaces.internet2.edu/d<wbr>isplay/SHIB2/IdPPersistentName<wbr>Identifier</a> --><br>
<resolver:AttributeDefinition xsi:type="ad:Simple" id="persistentId" sourceAttributeID="StoredPersi<wbr>stentId"><br>
<resolver:Dependency ref="SQLPersistentId" /><br>
<resolver:AttributeEncoder xsi:type="enc:SAML1StringNameI<wbr>dentifier" nameFormat="urn:oasis:names:tc<wbr>:SAML:2.0:nameid-format:persis<wbr>tent" /><br>
<resolver:AttributeEncoder xsi:type="enc:SAML2StringNameI<wbr>D" nameFormat="urn:oasis:names:tc<wbr>:SAML:2.0:nameid-format:persis<wbr>tent" /><br>
</resolver:AttributeDefinition<wbr>><br>
<br>
<!-- The usual Data Connector --><br>
<resolver:DataConnector xsi:type="dc:StoredId" id="SQLPersistentId"<br>
generatedAttributeID="StoredPe<wbr>rsistentId" ...etc...<br>
<br>
HTH,<br>
-pter<span class="HOEnZb"><font color="#888888"><br>
<span class="m_-1451965564916131264HOEnZb"><font color="#888888">--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" target="_blank">users-unsubscribe@shibboleth.n<wbr>et</a><br>
</font></span></font></span></blockquote></div><br></div></div>
</blockquote></div><br></div></div></div>