<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
</head>
<body>
<p>hello</p>
<p>based on
<a class="moz-txt-link-freetext" href="https://wiki.shibboleth.net/confluence/display/IDP4/NameIDGenerationConfiguration">https://wiki.shibboleth.net/confluence/display/IDP4/NameIDGenerationConfiguration</a></p>
<p>I did manage to create a persistent nameID based on mail
attribute as required by specific SPs [1] <br>
</p>
<p>but there are other SPs that needs also a persistent nameID,
this time based on eppn ! <br>
</p>
<p>I can I mix those 2 (and perhaps one day 3 or more ... )
attribute based persistent NameIDs for differents SPs [2] ? <br>
</p>
<p>in <font size="-1"><i>saml-nameid.properties</i></font> there's
only on variable : <font size="-1"><i> </i></font><font size="-1"><i><font
size="-1"><i>idp.persistentId.sourceAttribute</i></font></i></font></p>
<p>Thanks . <br>
</p>
<p>[1] <br>
</p>
<p><font size="-1"><i>saml-nameid.properties</i><i><br>
</i></font></p>
<p><font size="-1"><i>idp.persistentId.useUnfilteredAttributes =
true</i><i><br>
</i><i>idp.persistentId.sourceAttribute = mail</i><i><br>
</i><i>idp.persistentId.generator =
shibboleth.ComputedPersistentIdGenerator</i><i><br>
</i><i><br>
</i></font></p>
<p><font size="-1"><i>saml-nameid.xml</i><i><br>
</i></font></p>
<p><font size="-1"><i> <ref
bean="shibboleth.SAML2TransientGenerator" /></i><i><br>
</i><i><br>
</i><i> <!-- Uncommenting this bean requires
configuration in saml-nameid.properties. --></i><i><br>
</i><i> <!-- Jehan --></i><i><br>
</i><i> <ref
bean="shibboleth.SAML2PersistentGenerator" /></i><i><br>
</i><i> <bean
parent="shibboleth.SAML2AttributeSourcedGenerator"</i><i><br>
</i><i> p:omitQualifiers="true"</i><i><br>
</i><i>
p:format="urn:oasis:names:tc:SAML:2.0:nameid-format:emailAddress"</i><i><br>
</i><i> <b> p:attributeSourceIds="#{ {'mail'} }" ></b></i><i><br>
</i><i> <property
name="activationCondition"></i><i><br>
</i><i> <!-- docusign multiple
c:candidates --></i><i><br>
</i><i> <bean
parent="shibboleth.Conditions.RelyingPartyId"</i><i><br>
</i><i>
c:candidates="#{{'<a class="moz-txt-link-freetext" href="https://account.docusign.com/organizations/bf2a2a29-SECRET/saml2">https://account.docusign.com/organizations/bf2a2a29-SECRET/saml2</a>',
'<a class="moz-txt-link-freetext" href="https://account-d.docusign.com/organizations/bd30f5b2-SECRET/saml2">https://account-d.docusign.com/organizations/bd30f5b2-SECRET/saml2</a>'}}"
/></i><i><br>
</i><i> --></i><i><br>
</i><i> </property></i><i><br>
</i><i> </bean></i><i><br>
</i><i> </util:list></i><i><br>
</i></font></p>
<p>[2] <font size="-1"><i><br>
</i></font></p>
<p>Here in <font size="-1"><i>saml-nameid.xml </i></font> I guess I
could add another bean based on <br>
</p>
<p><font size="-1"><i><b> p:attributeSourceIds="#{ {'eppn'} }" >
<br>
</b></i></font></p>
<p>and appropriate c:candidates= entityIDs ... <br>
</p>
<p><br>
</p>
<p><br>
</p>
</body>
</html>