<div dir="ltr">Sorry! I should have noticed that.</div><div class="gmail_extra"><br><div class="gmail_quote">On Mon, Apr 30, 2018 at 3:55 PM, Boyd, Todd M. <span dir="ltr"><<a href="mailto:tmboyd1@ccis.edu" target="_blank">tmboyd1@ccis.edu</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div lang="EN-US" link="blue" vlink="purple">
<div class="m_-9191488812612139355WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d">Boyd’s my last name – our corporate email uses reverse order for sorting. :) At any rate, I tried it with “SHA” as the algorithm, but that is the default, anyway.
It shouldn’t matter.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d">-Todd<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">From:</span></b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> users <<a href="mailto:users-bounces@shibboleth.net" target="_blank">users-bounces@shibboleth.net</a>>
<b>On Behalf Of </b>Karla Borecky<br>
<b>Sent:</b> Monday, April 30, 2018 2:19 PM<br>
<b>To:</b> Shib Users <<a href="mailto:users@shibboleth.net" target="_blank">users@shibboleth.net</a>><br>
<b>Subject:</b> Re: Persistent NameID generation<u></u><u></u></span></p><div><div class="h5">
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<div>
<p class="MsoNormal">Hi Boyd,<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">I don't know if you mean the rest of your saml-nameid.properties file was
<b>literally</b> commented out, but under my persistentId source attribute and salt, there is this line<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<div>
<p class="MsoNormal">idp.persistentId.algorithm = SHA<u></u><u></u></p>
</div>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">The only other thing I can think of is, are you releasing the source attribute in your attribute filter?<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">cheers,<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal">Karla B<u></u><u></u></p>
</div>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<p class="MsoNormal">On Mon, Apr 30, 2018 at 2:56 PM, Boyd, Todd M. <<a href="mailto:tmboyd1@ccis.edu" target="_blank">tmboyd1@ccis.edu</a>> wrote:<u></u><u></u></p>
<blockquote style="border:none;border-left:solid #cccccc 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in">
<p class="MsoNormal">Here's the entire shibboleth.<wbr>SAML2NameIDGenerators section of saml-nameid.xml:<br>
<br>
<util:list id="shibboleth.<wbr>SAML2NameIDGenerators"><br>
<br>
<ref bean="shibboleth.<wbr>SAML2TransientGenerator" /><br>
<br>
<ref bean="shibboleth.<wbr>SAML2PersistentGenerator" /><br>
<br>
<bean parent="shibboleth.<wbr>SAML2AttributeSourcedGenerator<wbr>"<br>
p:format="urn:oid:1.3.6.1.4.1.<wbr>32548.1.1.2"<br>
p:attributeSourceIds="#{ {'campusPermanentId'} }" /><br>
<br>
<bean parent="shibboleth.<wbr>SAML2AttributeSourcedGenerator<wbr>"<br>
p:format="urn:oasis:names:tc:<wbr>SAML:1.1:nameid-format:<wbr>emailAddress"<br>
p:attributeSourceIds="#{ {'mail'} }" /><br>
<br>
</util:list><br>
<br>
Was there something else I needed to add, or is this from an older version of the config? Should it be a <bean /> element and not a <ref /> element for some reason?<br>
<span style="color:#888888"><br>
<span class="m_-9191488812612139355hoenzb">-Todd</span></span><u></u><u></u></p>
<div>
<div>
<p class="MsoNormal"><br>
<br>
-----Original Message-----<br>
From: users <<a href="mailto:users-bounces@shibboleth.net" target="_blank">users-bounces@shibboleth.net</a>> On Behalf Of Cantor, Scott<br>
Sent: Monday, April 30, 2018 1:39 PM<br>
To: Shib Users <<a href="mailto:users@shibboleth.net" target="_blank">users@shibboleth.net</a>><br>
Subject: RE: Persistent NameID generation<br>
<br>
> Any suggestions on where else I could<br>
> check to troubleshoot further?<br>
<br>
It isn't likely you uncommented the generator bean based on that, there are enough DEBUG log lines in there that should show up.<br>
<br>
-- Scott<br>
<br>
-- <br>
For Consortium Member technical support, see <a href="https://wiki.shibboleth.net/confluence/x/coFAAg" target="_blank">
https://wiki.shibboleth.net/<wbr>confluence/x/coFAAg</a><br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" target="_blank">
users-unsubscribe@shibboleth.<wbr>net</a><br>
-- <br>
For Consortium Member technical support, see <a href="https://wiki.shibboleth.net/confluence/x/coFAAg" target="_blank">
https://wiki.shibboleth.net/<wbr>confluence/x/coFAAg</a><br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" target="_blank">
users-unsubscribe@shibboleth.<wbr>net</a><u></u><u></u></p>
</div>
</div>
</blockquote>
</div>
<p class="MsoNormal"><br>
<br clear="all">
<u></u><u></u></p>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<p class="MsoNormal">-- <u></u><u></u></p>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div style="margin-left:30.0pt">
<p class="MsoNormal">Karla Borecky<br>
Systems Administrator<br>
ITS<br>
Smith College<br>
Northampton, MA 01063<u></u><u></u></p>
</div>
<div style="margin-left:30.0pt">
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div style="margin-left:30.0pt">
<p class="MsoNormal"><u></u> <u></u></p>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div></div></div>
</div>
<br>-- <br>
For Consortium Member technical support, see <a href="https://wiki.shibboleth.net/confluence/x/coFAAg" rel="noreferrer" target="_blank">https://wiki.shibboleth.net/<wbr>confluence/x/coFAAg</a><br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.<wbr>net</a><br></blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div style="margin-left:40px">Karla Borecky<br>Systems Administrator<br>ITS<br>Smith College<br>Northampton, MA 01063<br></div><div style="margin-left:40px"><br></div><div style="margin-left:40px"><br></div></div></div></div></div></div></div></div>
</div>