<div dir="ltr"><div><div><span style="color:rgb(51,51,51);font-family:Arial,sans-serif;font-size:14px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;letter-spacing:normal;text-align:left;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial">For Stored IDs  -- the options are base64 or base32 (</span><span style="color:rgb(51,51,51);font-family:Arial,sans-serif;font-size:14px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;letter-spacing:normal;text-align:left;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial"><span style="color:rgb(51,51,51);font-family:Arial,sans-serif;font-size:14px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;letter-spacing:normal;text-align:left;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial">idp.persistentId.encoding</span>).<br><br></span></div><span style="color:rgb(51,51,51);font-family:Arial,sans-serif;font-size:14px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;letter-spacing:normal;text-align:left;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial">What could be the options of generating Type 4 for the Stored ID?</span><span style="color:rgb(51,51,51);font-family:Arial,sans-serif;font-size:14px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;letter-spacing:normal;text-align:left;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial"> <br><br></span></div><span style="color:rgb(51,51,51);font-family:Arial,sans-serif;font-size:14px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;letter-spacing:normal;text-align:left;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial">Below is description from <a href="http://www.baeldung.com/java-uuid">http://www.baeldung.com/java-uuid</a> --- but of course, we would have a predefined value as the source (not the random in example below).</span><span style="color:rgb(51,51,51);font-family:Arial,sans-serif;font-size:14px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;letter-spacing:normal;text-align:left;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial"> More at <a href="https://www.sohamkamani.com/blog/2016/10/05/uuid1-vs-uuid4/">https://www.sohamkamani.com/blog/2016/10/05/uuid1-vs-uuid4/</a>.</span><strong style="color:rgb(51,51,51);font-family:Arial,sans-serif;font-size:14px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;letter-spacing:normal;text-align:left;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial"><br></strong><div><strong style="color:rgb(51,51,51);font-family:Arial,sans-serif;font-size:14px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;letter-spacing:normal;text-align:left;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial"><br>"</strong><p style="box-sizing:border-box;font-size:18px;font-family:Raleway;margin:0px 0px 10px;color:rgb(83,83,83);font-weight:400;line-height:24px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial">The UUID v4 implementation uses random numbers as the source. The Java implementation is <em style="box-sizing:border-box;font-size:18px;font-family:Raleway">SecureRandom</em><span> </span>– which uses an unpredictable value as the seed to generate random numbers to reduce the chance of collisions.</p><p style="box-sizing:border-box;font-size:18px;font-family:Raleway;margin:0px 0px 10px;color:rgb(83,83,83);font-weight:400;line-height:24px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial">Let’s generate version 4 UUID:</p><div style="box-sizing:border-box;font-size:18px;font-family:Raleway;color:rgb(51,51,51);font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial"><div id="gmail-highlighter_182786" class="gmail-syntaxhighlighter gmail-notranslate gmail-java" style="box-sizing:border-box;font-size:14px;font-family:"Source Code Pro";font-weight:300;width:873.328px;margin:25px 0px;overflow-x:auto;overflow-y:hidden;background-color:white;line-height:20px;padding:1px"><table style="box-sizing:content-box;font-size:14px;font-family:"Source Code Pro";border-collapse:collapse;border-spacing:0px;background:rgba(0,0,0,0) none repeat scroll 0% 0%;font-weight:300;border-radius:0px;border-color:currentcolor;border-style:none;border-width:0px;float:none;height:auto;line-height:20px;margin:0px;outline:0px none currentcolor;overflow:visible;padding:0px;text-align:left;vertical-align:baseline;width:871px;font-style:normal;min-height:auto" cellspacing="0" cellpadding="0" border="0"><tbody style="box-sizing:content-box;font-size:14px;font-family:"Source Code Pro";font-weight:300;border-radius:0px;background:rgba(0,0,0,0) none repeat scroll 0% 0%;border-color:currentcolor;border-style:none;border-width:0px;float:none;height:auto;line-height:20px;margin:0px;outline:0px none currentcolor;overflow:visible;padding:0px;text-align:left;vertical-align:baseline;width:auto;font-style:normal;min-height:auto"><tr style="box-sizing:content-box;font-size:14px;font-family:"Source Code Pro";font-weight:300;border-radius:0px;background:rgba(0,0,0,0) none repeat scroll 0% 0%;border-color:currentcolor;border-style:none;border-width:0px;float:none;height:auto;line-height:20px;margin:0px;outline:0px none currentcolor;overflow:visible;padding:0px;text-align:left;vertical-align:baseline;width:auto;font-style:normal;min-height:auto"><td class="gmail-gutter" style="box-sizing:content-box;font-size:14px;font-family:"Source Code Pro";padding:0px;font-weight:300;border-radius:0px;background:rgba(0,0,0,0) none repeat scroll 0% 0%;border-color:currentcolor;border-style:none;border-width:0px;float:none;height:auto;line-height:20px;margin:0px;outline:0px none currentcolor;overflow:visible;text-align:left;vertical-align:baseline;width:auto;font-style:normal;min-height:auto;color:rgb(175,175,175)"><div class="gmail-line gmail-number1 gmail-index0 gmail-alt2" style="box-sizing:content-box;font-size:14px;font-family:"Source Code Pro";font-weight:300;border-radius:0px;background:white none repeat scroll 0% 0%;border-width:0px 3px 0px 0px;border-top-style:initial;border-right:3px solid rgb(99,177,117);border-bottom-style:initial;border-left-style:initial;border-top-color:initial;border-bottom-color:initial;border-left-color:initial;float:none;height:auto;line-height:20px;margin:0px;outline:0px none currentcolor;overflow:visible;padding:0px 0.5em 0px 1em;text-align:right;vertical-align:baseline;width:auto;font-style:normal;min-height:auto;white-space:pre">1</div></td><td class="gmail-code" style="box-sizing:content-box;font-size:14px;font-family:"Source Code Pro";padding:0px;font-weight:300;border-radius:0px;background:rgba(0,0,0,0) none repeat scroll 0% 0%;border-color:currentcolor;border-style:none;border-width:0px;float:none;height:auto;line-height:20px;margin:0px;outline:0px none currentcolor;overflow:visible;text-align:left;vertical-align:baseline;width:838px;font-style:normal;min-height:auto"><div class="gmail-container" style="box-sizing:content-box;font-size:14px;font-family:"Source Code Pro";margin:0px;padding:0px;width:auto;font-weight:300;border-radius:0px;background:rgba(0,0,0,0) none repeat scroll 0% 0%;border-color:currentcolor;border-style:none;border-width:0px;float:none;height:auto;line-height:20px;outline:0px none currentcolor;overflow:visible;text-align:left;vertical-align:baseline;font-style:normal;min-height:auto"><div class="gmail-line gmail-number1 gmail-index0 gmail-alt2" style="box-sizing:content-box;font-size:14px;font-family:"Source Code Pro";font-weight:300;border-radius:0px;background:white none repeat scroll 0% 0%;border-color:currentcolor;border-style:none;border-width:0px;float:none;height:auto;line-height:20px;margin:0px;outline:0px none currentcolor;overflow:visible;padding:0px 1em;text-align:left;vertical-align:baseline;width:auto;font-style:normal;min-height:auto;white-space:pre"><code class="gmail-java gmail-plain" style="box-sizing:content-box;font-size:14px;font-family:"Source Code Pro";padding:0px;color:black;background:rgba(0,0,0,0) none repeat scroll 0% 0%;border-radius:0px;font-weight:300;border-color:currentcolor;border-style:none;border-width:0px;float:none;height:auto;line-height:20px;margin:0px;outline:0px none currentcolor;overflow:visible;text-align:left;vertical-align:baseline;width:auto;font-style:normal;min-height:auto">UUID uuid = UUID.randomUUID();</code></div></div></td></tr></tbody></table></div></div><p style="box-sizing:border-box;font-size:18px;font-family:Raleway;margin:0px 0px 10px;color:rgb(83,83,83);font-weight:400;line-height:24px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial">Let’s generate a unique key using ‘SHA-256’ and a random UUID:</p><div style="box-sizing:border-box;font-size:18px;font-family:Raleway;color:rgb(51,51,51);font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial"><div id="gmail-highlighter_289223" class="gmail-syntaxhighlighter gmail-notranslate gmail-java" style="box-sizing:border-box;font-size:14px;font-family:"Source Code Pro";font-weight:300;width:873.328px;margin:25px 0px;overflow-x:auto;overflow-y:hidden;background-color:white;line-height:20px;padding:1px"><table style="box-sizing:content-box;font-size:14px;font-family:"Source Code Pro";border-collapse:collapse;border-spacing:0px;background:rgba(0,0,0,0) none repeat scroll 0% 0%;font-weight:300;border-radius:0px;border-color:currentcolor;border-style:none;border-width:0px;float:none;height:auto;line-height:20px;margin:0px;outline:0px none currentcolor;overflow:visible;padding:0px;text-align:left;vertical-align:baseline;width:871px;font-style:normal;min-height:auto" cellspacing="0" cellpadding="0" border="0"><tbody style="box-sizing:content-box;font-size:14px;font-family:"Source Code Pro";font-weight:300;border-radius:0px;background:rgba(0,0,0,0) none repeat scroll 0% 0%;border-color:currentcolor;border-style:none;border-width:0px;float:none;height:auto;line-height:20px;margin:0px;outline:0px none currentcolor;overflow:visible;padding:0px;text-align:left;vertical-align:baseline;width:auto;font-style:normal;min-height:auto"><tr style="box-sizing:content-box;font-size:14px;font-family:"Source Code Pro";font-weight:300;border-radius:0px;background:rgba(0,0,0,0) none repeat scroll 0% 0%;border-color:currentcolor;border-style:none;border-width:0px;float:none;height:auto;line-height:20px;margin:0px;outline:0px none currentcolor;overflow:visible;padding:0px;text-align:left;vertical-align:baseline;width:auto;font-style:normal;min-height:auto"><td class="gmail-gutter" style="box-sizing:content-box;font-size:14px;font-family:"Source Code Pro";padding:0px;font-weight:300;border-radius:0px;background:rgba(0,0,0,0) none repeat scroll 0% 0%;border-color:currentcolor;border-style:none;border-width:0px;float:none;height:auto;line-height:20px;margin:0px;outline:0px none currentcolor;overflow:visible;text-align:left;vertical-align:baseline;width:auto;font-style:normal;min-height:auto;color:rgb(175,175,175)"><div class="gmail-line gmail-number1 gmail-index0 gmail-alt2" style="box-sizing:content-box;font-size:14px;font-family:"Source Code Pro";font-weight:300;border-radius:0px;background:white none repeat scroll 0% 0%;border-width:0px 3px 0px 0px;border-top-style:initial;border-right:3px solid rgb(99,177,117);border-bottom-style:initial;border-left-style:initial;border-top-color:initial;border-bottom-color:initial;border-left-color:initial;float:none;height:auto;line-height:20px;margin:0px;outline:0px none currentcolor;overflow:visible;padding:0px 0.5em 0px 1em;text-align:right;vertical-align:baseline;width:auto;font-style:normal;min-height:auto;white-space:pre">1</div><div class="gmail-line gmail-number2 gmail-index1 gmail-alt1" style="box-sizing:content-box;font-size:14px;font-family:"Source Code Pro";font-weight:300;border-radius:0px;background:white none repeat scroll 0% 0%;border-width:0px 3px 0px 0px;border-top-style:initial;border-right:3px solid rgb(99,177,117);border-bottom-style:initial;border-left-style:initial;border-top-color:initial;border-bottom-color:initial;border-left-color:initial;float:none;height:auto;line-height:20px;margin:0px;outline:0px none currentcolor;overflow:visible;padding:0px 0.5em 0px 1em;text-align:right;vertical-align:baseline;width:auto;font-style:normal;min-height:auto;white-space:pre">2</div><div class="gmail-line gmail-number3 gmail-index2 gmail-alt2" style="box-sizing:content-box;font-size:14px;font-family:"Source Code Pro";font-weight:300;border-radius:0px;background:white none repeat scroll 0% 0%;border-width:0px 3px 0px 0px;border-top-style:initial;border-right:3px solid rgb(99,177,117);border-bottom-style:initial;border-left-style:initial;border-top-color:initial;border-bottom-color:initial;border-left-color:initial;float:none;height:auto;line-height:20px;margin:0px;outline:0px none currentcolor;overflow:visible;padding:0px 0.5em 0px 1em;text-align:right;vertical-align:baseline;width:auto;font-style:normal;min-height:auto;white-space:pre">3</div></td><td class="gmail-code" style="box-sizing:content-box;font-size:14px;font-family:"Source Code Pro";padding:0px;font-weight:300;border-radius:0px;background:rgba(0,0,0,0) none repeat scroll 0% 0%;border-color:currentcolor;border-style:none;border-width:0px;float:none;height:auto;line-height:20px;margin:0px;outline:0px none currentcolor;overflow:visible;text-align:left;vertical-align:baseline;width:838px;font-style:normal;min-height:auto"><div class="gmail-container" style="box-sizing:content-box;font-size:14px;font-family:"Source Code Pro";margin:0px;padding:0px;width:auto;font-weight:300;border-radius:0px;background:rgba(0,0,0,0) none repeat scroll 0% 0%;border-color:currentcolor;border-style:none;border-width:0px;float:none;height:auto;line-height:20px;outline:0px none currentcolor;overflow:visible;text-align:left;vertical-align:baseline;font-style:normal;min-height:auto"><div class="gmail-line gmail-number1 gmail-index0 gmail-alt2" style="box-sizing:content-box;font-size:14px;font-family:"Source Code Pro";font-weight:300;border-radius:0px;background:white none repeat scroll 0% 0%;border-color:currentcolor;border-style:none;border-width:0px;float:none;height:auto;line-height:20px;margin:0px;outline:0px none currentcolor;overflow:visible;padding:0px 1em;text-align:left;vertical-align:baseline;width:auto;font-style:normal;min-height:auto;white-space:pre"><code class="gmail-java gmail-plain" style="box-sizing:content-box;font-size:14px;font-family:"Source Code Pro";padding:0px;color:black;background:rgba(0,0,0,0) none repeat scroll 0% 0%;border-radius:0px;font-weight:300;border-color:currentcolor;border-style:none;border-width:0px;float:none;height:auto;line-height:20px;margin:0px;outline:0px none currentcolor;overflow:visible;text-align:left;vertical-align:baseline;width:auto;font-style:normal;min-height:auto">MessageDigest salt = MessageDigest.getInstance(</code><code class="gmail-java gmail-string" style="box-sizing:content-box;font-size:14px;font-family:"Source Code Pro";padding:0px;color:rgb(99,177,117);background:rgba(0,0,0,0) none repeat scroll 0% 0%;border-radius:0px;font-weight:600;border-color:currentcolor;border-style:none;border-width:0px;float:none;height:auto;line-height:20px;margin:0px;outline:0px none currentcolor;overflow:visible;text-align:left;vertical-align:baseline;width:auto;font-style:normal;min-height:auto">"SHA-256"</code><code class="gmail-java gmail-plain" style="box-sizing:content-box;font-size:14px;font-family:"Source Code Pro";padding:0px;color:black;background:rgba(0,0,0,0) none repeat scroll 0% 0%;border-radius:0px;font-weight:300;border-color:currentcolor;border-style:none;border-width:0px;float:none;height:auto;line-height:20px;margin:0px;outline:0px none currentcolor;overflow:visible;text-align:left;vertical-align:baseline;width:auto;font-style:normal;min-height:auto">);</code></div><div class="gmail-line gmail-number2 gmail-index1 gmail-alt1" style="box-sizing:content-box;font-size:14px;font-family:"Source Code Pro";font-weight:300;border-radius:0px;background:white none repeat scroll 0% 0%;border-color:currentcolor;border-style:none;border-width:0px;float:none;height:auto;line-height:20px;margin:0px;outline:0px none currentcolor;overflow:visible;padding:0px 1em;text-align:left;vertical-align:baseline;width:auto;font-style:normal;min-height:auto;white-space:pre"><code class="gmail-java gmail-plain" style="box-sizing:content-box;font-size:14px;font-family:"Source Code Pro";padding:0px;color:black;background:rgba(0,0,0,0) none repeat scroll 0% 0%;border-radius:0px;font-weight:300;border-color:currentcolor;border-style:none;border-width:0px;float:none;height:auto;line-height:20px;margin:0px;outline:0px none currentcolor;overflow:visible;text-align:left;vertical-align:baseline;width:auto;font-style:normal;min-height:auto">salt.update(UUID.randomUUID().toString().getBytes(</code><code class="gmail-java gmail-string" style="box-sizing:content-box;font-size:14px;font-family:"Source Code Pro";padding:0px;color:rgb(99,177,117);background:rgba(0,0,0,0) none repeat scroll 0% 0%;border-radius:0px;font-weight:600;border-color:currentcolor;border-style:none;border-width:0px;float:none;height:auto;line-height:20px;margin:0px;outline:0px none currentcolor;overflow:visible;text-align:left;vertical-align:baseline;width:auto;font-style:normal;min-height:auto">"UTF-8"</code><code class="gmail-java gmail-plain" style="box-sizing:content-box;font-size:14px;font-family:"Source Code Pro";padding:0px;color:black;background:rgba(0,0,0,0) none repeat scroll 0% 0%;border-radius:0px;font-weight:300;border-color:currentcolor;border-style:none;border-width:0px;float:none;height:auto;line-height:20px;margin:0px;outline:0px none currentcolor;overflow:visible;text-align:left;vertical-align:baseline;width:auto;font-style:normal;min-height:auto">));</code></div><div class="gmail-line gmail-number3 gmail-index2 gmail-alt2" style="box-sizing:content-box;font-size:14px;font-family:"Source Code Pro";font-weight:300;border-radius:0px;background:white none repeat scroll 0% 0%;border-color:currentcolor;border-style:none;border-width:0px;float:none;height:auto;line-height:20px;margin:0px;outline:0px none currentcolor;overflow:visible;padding:0px 1em;text-align:left;vertical-align:baseline;width:auto;font-style:normal;min-height:auto;white-space:pre"><code class="gmail-java gmail-plain" style="box-sizing:content-box;font-size:14px;font-family:"Source Code Pro";padding:0px;color:black;background:rgba(0,0,0,0) none repeat scroll 0% 0%;border-radius:0px;font-weight:300;border-color:currentcolor;border-style:none;border-width:0px;float:none;height:auto;line-height:20px;margin:0px;outline:0px none currentcolor;overflow:visible;text-align:left;vertical-align:baseline;width:auto;font-style:normal;min-height:auto">String digest = bytesToHex(salt.digest());</code></div></div></td></tr></tbody></table></div></div><strong style="color:rgb(51,51,51);font-family:Arial,sans-serif;font-size:14px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;letter-spacing:normal;text-align:left;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial">"<br></strong></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Tue, Jan 23, 2018 at 4:32 PM, Cantor, Scott <span dir="ltr"><<a href="mailto:cantor.2@osu.edu" target="_blank">cantor.2@osu.edu</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span class="">On 1/23/18, 7:06 PM, "users on behalf of Hugo Slavia" <<a href="mailto:users-bounces@shibboleth.net">users-bounces@shibboleth.net</a> on behalf of <a href="mailto:hugoslavia101@gmail.com">hugoslavia101@gmail.com</a>> wrote:<br>
<br>
> Is it possible to generate Type 4 UUID for PersistentNameIDGenerationConf<wbr>iguration?  We are currently leveraging<br>
> "idp.persistentId.salt = foobar" in 'saml-nameid.properties.<br>
<br>
</span>I don't understand the question. There are two strategy plugins provided for supplying pairwise IDs, a salted hash and a random value stored in a database. I don't recall exactly which UUID type is used for the random stored variant, it's just the usual "generate a random value" one.<br>
<span class="HOEnZb"><font color="#888888"><br>
-- Scott<br>
<br>
<br>
--<br>
For Consortium Member technical support, see <a href="https://wiki.shibboleth.net/confluence/x/coFAAg" rel="noreferrer" target="_blank">https://wiki.shibboleth.net/<wbr>confluence/x/coFAAg</a><br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.<wbr>net</a><br>
</font></span></blockquote></div><br></div>