<div dir="ltr"><div>Hi Boyd,</div><div><br></div><div>I don't know if you mean the rest of your saml-nameid.properties file was <b>literally</b> commented out, but under my persistentId source attribute and salt, there is this line</div><div><br></div><div><div>idp.persistentId.algorithm = SHA</div></div><div><br></div><div>The only other thing I can think of is, are you releasing the source attribute in your attribute filter?</div><div><br></div><div>cheers,</div><div>Karla B</div></div><div class="gmail_extra"><br><div class="gmail_quote">On Mon, Apr 30, 2018 at 2:56 PM, Boyd, Todd M. <span dir="ltr"><<a href="mailto:tmboyd1@ccis.edu" target="_blank">tmboyd1@ccis.edu</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Here's the entire shibboleth.<wbr>SAML2NameIDGenerators section of saml-nameid.xml:<br>
<br>
<util:list id="shibboleth.<wbr>SAML2NameIDGenerators"><br>
<br>
<ref bean="shibboleth.<wbr>SAML2TransientGenerator" /><br>
<br>
<ref bean="shibboleth.<wbr>SAML2PersistentGenerator" /><br>
<br>
<bean parent="shibboleth.<wbr>SAML2AttributeSourcedGenerator<wbr>"<br>
p:format="urn:oid:1.3.6.1.4.1.<wbr>32548.1.1.2"<br>
p:attributeSourceIds="#{ {'campusPermanentId'} }" /><br>
<br>
<bean parent="shibboleth.<wbr>SAML2AttributeSourcedGenerator<wbr>"<br>
p:format="urn:oasis:names:tc:<wbr>SAML:1.1:nameid-format:<wbr>emailAddress"<br>
p:attributeSourceIds="#{ {'mail'} }" /><br>
<br>
</util:list><br>
<br>
Was there something else I needed to add, or is this from an older version of the config? Should it be a <bean /> element and not a <ref /> element for some reason?<br>
<span class="HOEnZb"><font color="#888888"><br>
-Todd<br>
</font></span><div class="HOEnZb"><div class="h5"><br>
<br>
-----Original Message-----<br>
From: users <<a href="mailto:users-bounces@shibboleth.net">users-bounces@shibboleth.net</a>> On Behalf Of Cantor, Scott<br>
Sent: Monday, April 30, 2018 1:39 PM<br>
To: Shib Users <<a href="mailto:users@shibboleth.net">users@shibboleth.net</a>><br>
Subject: RE: Persistent NameID generation<br>
<br>
> Any suggestions on where else I could<br>
> check to troubleshoot further?<br>
<br>
It isn't likely you uncommented the generator bean based on that, there are enough DEBUG log lines in there that should show up.<br>
<br>
-- Scott<br>
<br>
-- <br>
For Consortium Member technical support, see <a href="https://wiki.shibboleth.net/confluence/x/coFAAg" rel="noreferrer" target="_blank">https://wiki.shibboleth.net/<wbr>confluence/x/coFAAg</a><br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.<wbr>net</a><br>
-- <br>
For Consortium Member technical support, see <a href="https://wiki.shibboleth.net/confluence/x/coFAAg" rel="noreferrer" target="_blank">https://wiki.shibboleth.net/<wbr>confluence/x/coFAAg</a><br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.<wbr>net</a><br>
</div></div></blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div style="margin-left:40px">Karla Borecky<br>Systems Administrator<br>ITS<br>Smith College<br>Northampton, MA 01063<br></div><div style="margin-left:40px"><br></div><div style="margin-left:40px"><br></div></div></div></div></div></div></div></div>
</div>