<div dir="ltr">We are recently on idp3.3.0 and enabled:<br><br><!-- ==NameID== --><br>      <resolver:AttributeDefinition id="NameID" xsi:type="Simple" xmlns="urn:mace:shibboleth:2.0:resolver:ad" sourceAttributeID="eduPersonTargetedID"><br>              <resolver:Dependency ref="eduPersonTargetedID" /><br>              <resolver:AttributeEncoder xsi:type="SAML2StringNameID" <br>                                  xmlns="urn:mace:shibboleth:2.0:attribute:encoder"<br>                                nameFormat="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent" /><br>       </resolver:AttributeDefinition><br><br><!-- Targeted ID/Persistent ID --><br>        <resolver:AttributeDefinition id="eduPersonTargetedID" xsi:type="ad:SAML2NameID" sourceAttributeID="persistentID"<br>            nameIdFormat="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent"><br>            <resolver:Dependency ref="myStoredId" /><br>            <resolver:DisplayName xml:lang="en">Targeted ID</resolver:DisplayName><br>            <resolver:DisplayDescription xml:lang="en">Targeted ID: A unique identifier for a person, different for each service provider.</resolver:DisplayDescription><br>            <resolver:AttributeEncoder xsi:type="enc:SAML2XMLObject" name="urn:oid:1.3.6.1.4.1.5923.1.1.1.10" friendlyName="eduPersonTargetedID" /><br>        </resolver:AttributeDefinition><br><br><!-- StoredId --><br><resolver:DataConnector id="myStoredId" xsi:type="dc:StoredId" generatedAttributeID="persistentID" sourceAttributeID="%{idp.persistentId.sourceAttribute}" salt="%{idp.persistentId.salt}" queryTimeout="0"><br>                <resolver:Dependency ref="%{idp.persistentId.sourceAttribute}" /><br>                <dc:BeanManagedConnection>OracleDataSource</dc:BeanManagedConnection><br>            </resolver:DataConnector><br><div><br></div><div>However -- receiving following occasional errors in idp-warn.log --- saw the following on the wiki: "<a href="http://shibboleth.1660669.n2.nabble.com/Error-obtaining-persistent-identifier-ORA-08177-can-t-serialize-access-for-this-transaction-td7628075.html">http://shibboleth.1660669.n2.nabble.com/Error-obtaining-persistent-identifier-ORA-08177-can-t-serialize-access-for-this-transaction-td7628075.html</a>" -- Quite new to Shibboleth and I can't say I completely understand the explanation in thread --- is it due to a race condition, what steps can alleviate it?<br></div><div><br></div><div><br></div><div><br></div><div><br>2017-09-10 19:52:08,492 - ERROR [net.shibboleth.idp.profile.impl.ResolveAttributes:299] - Profile Action ResolveAttributes: Error resolving attributes<br>net.shibboleth.idp.attribute.resolver.ResolutionException: org.opensaml.saml.common.SAMLException: ID storage error obtaining persistent identifier<br>        at net.shibboleth.idp.saml.attribute.resolver.impl.StoredIDDataConnector.doDataConnectorResolve(StoredIDDataConnector.java:236)<br>Caused by: org.opensaml.saml.common.SAMLException: ID storage error obtaining persistent identifier<br>        at net.shibboleth.idp.saml.nameid.impl.StoredPersistentIdGenerationStrategy.generate(StoredPersistentIdGenerationStrategy.java:178)<br>Caused by: java.io.IOException: java.sql.SQLException: ORA-08177: can't serialize access for this transaction<br><br>        at net.shibboleth.idp.saml.nameid.impl.JDBCPersistentIdStoreEx.getBySourceValue(JDBCPersistentIdStoreEx.java:629)<br>Caused by: java.sql.SQLException: ORA-08177: can't serialize access for this transaction<br><br>        at oracle.jdbc.driver.T4CTTIoer.processError(T4CTTIoer.java:445)<br></div></div>