<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">
Hi everyone.
<div class=""><br class="">
</div>
<div class="">I’m preparing to upgrade our IdP 3.3.1 to 3.4.6. We have 6 different SPs that use the eduPersonTargetedID attribute to identify users. The ePTID is defined in attribute-resolver.xml as using a ComputedId attribute as the source.</div>
<div class="">——</div>
<div class=""> <AttributeDefinition id="eduPersonTargetedID"<br class="">
xsi:type="SAML2NameID"<br class="">
sourceAttributeID=“computedID" ><br class="">
<Dependency ref="computedID" /><br class="">
<AttributeEncoder xsi:type="SAML1XMLObject"<br class="">
name="urn:oid:1.3.6.1.4.1.5923.1.1.1.10" /><br class="">
<AttributeEncoder xsi:type="SAML2XMLObject"<br class="">
name="urn:oid:1.3.6.1.4.1.5923.1.1.1.10" friendlyName="computedID" /><br class="">
</AttributeDefinition></div>
<div class="">——</div>
<div class="">The ComputedId data connector is defined as using our employee ID attribute, “ucsfeduidnumber”, as a sourceAttributeID.</div>
<div class="">——</div>
<div class=""> <DataConnector xsi:type="ComputedId"<br class="">
id="computedID"<br class="">
generatedAttributeID="computedID"<br class="">
sourceAttributeID="ucsfeduidnumber"<br class="">
salt=“(salt string omitted for privacy)"><br class="">
<Dependency ref="myLDAP" /><br class="">
</DataConnector><br class="">
——</div>
<div class="">The documentation for the ComputedIdConnector at <a href="https://wiki.shibboleth.net/confluence/display/IDP30/ComputedIdConnector" class="">https://wiki.shibboleth.net/confluence/display/IDP30/ComputedIdConnector</a> indicates that, as of version
3.4, the sourceAttriubteID data connector attribute has been deprecated.</div>
<div class=""><br class="">
</div>
<div class="">How do I maintain existing ePTID values for users after the 3.4 upgrade so there is no interruption in service with the 6 SPs that rely on ePTID?</div>
<div class=""><br class="">
</div>
<div class="">The saml-nameid.properties file currently has no properties defined (they’re all commented out). If I were to add "idp.persistentId.sourceAttribute = ucsfeduidnumber" to the properties, what value would I need to specify for the “idp.persistentId.useUnfilteredAttributes”
and “idp.persistentId.algorithm” properties to prevent the ePTID from changing? Also, would switching to using the properties instead of the data connector defined sourceAttributeID change the behavior of the data sent by the shibboleth.SAML2AttributeSourcedGenerator,
for which we have a number of attributeSourceIds defined in the saml-nameid.xml file?</div>
<div class=""><br class="">
</div>
<div class="">Thanks.<br class="">
<div class="">
<div dir="auto" style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">
<div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;">
----<br class="">
Nathan Sheldon<br class="">
Systems Integration Engineer<br class="">
Identity and Access Management,<br class="">
Information Technology Services<br class="">
University of California, San Francisco</div>
<div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;">
<br class="">
</div>
<div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;">
<br class="">
</div>
<div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;">
<br class="">
</div>
<div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;">
<br class="">
</div>
</div>
<br class="Apple-interchange-newline">
</div>
<br class="">
</div>
</body>
</html>