<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div class="elementToProof"><span class="elementToProof" style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0); background-color:rgb(255,255,255)">Hi</span></div>
<div class="elementToProof"><span class="elementToProof" style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0); background-color:rgb(255,255,255)"><br>
</span></div>
<div class="elementToProof"><span class="elementToProof" style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0); background-color:rgb(255,255,255)">If it helps, we send eduPersonTargetedID as a 'persistent' attribute.</span></div>
<div class="elementToProof"><span class="elementToProof" style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0); background-color:rgb(255,255,255)">It's computed in attribute-resolver.xml, based on the username and a salt -
so it's consistent every time that same username logs in.</span></div>
<div class="elementToProof"><span class="elementToProof" style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0); background-color:rgb(255,255,255)"><br>
</span></div>
<div class="elementToProof"><span class="elementToProof" style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0); background-color:rgb(255,255,255)">Config lines follow (add both these chunks in with your other definitions):</span></div>
<div class="elementToProof"><span class="elementToProof" style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0); background-color:rgb(255,255,255)"><br>
</span></div>
<div class="elementToProof"><span class="elementToProof ContentPasted0" style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0); background-color:rgb(255,255,255)"> <AttributeDefinition id="eduPersonTargetedID" xsi:type="SAML2NameID"
nameIdFormat="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent">
<div class="FluidPluginCopy ContentPasted0"> <InputDataConnector ref="computedID" attributeNames="computedID" /></div>
<div class="FluidPluginCopy ContentPasted0"> <AttributeEncoder xsi:type="SAML1XMLObject" name="urn:oid:1.3.6.1.4.1.5923.1.1.1.10" /></div>
<div class="FluidPluginCopy ContentPasted0"> <AttributeEncoder xsi:type="SAML2XMLObject" name="urn:oid:1.3.6.1.4.1.5923.1.1.1.10" friendlyName="eduPersonTargetedID" /></div>
</AttributeDefinition><br>
</span></div>
<div class="elementToProof"><span class="elementToProof ContentPasted0" style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0); background-color:rgb(255,255,255)"><br>
</span></div>
<div class="elementToProof ContentPasted1" style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);">
<DataConnector xsi:type="ComputedId"
<div class="FluidPluginCopy ContentPasted1"> id="computedID"
</div>
<div class="FluidPluginCopy ContentPasted1"> generatedAttributeID="computedID" </div>
<div class="FluidPluginCopy ContentPasted1"> salt="yourSaltGoesHere"> </div>
<div class="FluidPluginCopy ContentPasted1"> <InputDataConnector ref="myLDAP" attributeNames="objectGUID" /></div>
</DataConnector><br>
</div>
<div class="elementToProof"><span class="elementToProof ContentPasted0" style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0); background-color:rgb(255,255,255)"><br>
</span></div>
<div class="elementToProof">
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
This assumes myLDAP is connecting to on-prem Active Directory.</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<br>
</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<br>
</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
HTH</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
Dave</div>
<div id="Signature">
<div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<span style="font-size:10pt">_________________________________________________</span></div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<span style="font-size:10pt"></span></div>
<table style="border-collapse:collapse; border:none">
<tbody>
<tr style="height:96.45pt">
<td width="405" valign="top" style="width:303.75pt; padding:0cm 5.4pt 0cm 5.4pt; height:96.45pt">
<p style="margin-top: 0px; margin-bottom: 0px;margin:0cm 0cm 8pt; line-height:120%; font-size:11pt; font-family:Calibri,sans-serif; margin-bottom:0cm">
<b><span style="font-size:10.0pt; font-family:"Arial",sans-serif">Dave Perry</span></b><span style=""><span style="font-size:12.0pt; font-family:"Times New Roman",serif"><br>
</span></span><span style=""><span style="font-size:9.0pt; font-family:"Arial",sans-serif">Application Analyst<span style=""> </span><b>|<span style="">
</span></b>Innovation & Technology Services<br>
<br>
</span></span><span style=""><span style="font-size:9.0pt; font-family:"Arial",sans-serif">York St John University </span></span></p>
<p style="margin-top: 0px; margin-bottom: 0px;margin:0cm 0cm 8pt; line-height:120%; font-size:11pt; font-family:Calibri,sans-serif; margin-bottom:0cm">
<span style=""><span style="font-size:9.0pt; font-family:"Arial",sans-serif">Lord Mayor’s Walk, York, YO31 7EX</span></span><span style=""><span style="font-size:9.0pt; font-family:"Arial",sans-serif"><br>
T: +44(0)1904 876 0000<br>
</span></span><a href="mailto:email@yorksj.ac.uk" data-auth="NotApplicable" data-loopstyle="link"><span style=""><span style="font-size:9.0pt; font-family:"Arial",sans-serif">email@yorksj.ac.uk</span></span></a><span style=""><span style="font-size:9.0pt; font-family:"Arial",sans-serif"><span style="">
</span><b>|<span style=""> </span></b></span></span><a href="http://www.yorksj.ac.uk" data-auth="NotApplicable" data-loopstyle="link"><span style=""><span style="font-size:9.0pt; font-family:"Arial",sans-serif">www.y</span></span><span style=""><span style="font-size:9.0pt; font-family:"Arial",sans-serif">orksj</span></span><span style=""><span style="font-size:9.0pt; font-family:"Arial",sans-serif">.ac.uk</span></span></a><span style="font-size:9.0pt; font-family:"Arial",sans-serif"> </span></p>
</td>
</tr>
<tr style="height:74.7pt">
<td width="405" valign="top" style="width:303.75pt; padding:0cm 5.4pt 0cm 5.4pt; height:74.7pt">
<p style="margin-top: 0px; margin-bottom: 0px;margin:0cm 0cm 8pt; font-size:11pt; font-family:Calibri,sans-serif; margin-bottom:0cm">
<b><span style="font-size:12.0pt; font-family:"Arial",sans-serif"><img style="max-width:100%" data-outlook-trace="F:1|T:1" src="cid:da903abc-ab89-4064-8aa9-f648371f5fbe"> </span></b></p>
</td>
</tr>
</tbody>
</table>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<span style="font-size:10pt"></span></div>
</div>
</div>
</div>
<div id="appendonsend"></div>
<hr tabindex="-1" style="display:inline-block; width:98%">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" color="#000000" style="font-size:11pt"><b>From:</b> users <users-bounces@shibboleth.net> on behalf of Melvin Lasky via users <users@shibboleth.net><br>
<b>Sent:</b> 11 January 2023 15:50<br>
<b>To:</b> Shib Users <users@shibboleth.net><br>
<b>Cc:</b> Melvin Lasky <melvin.lasky@manhattan.edu><br>
<b>Subject:</b> Persistent ID instead of Transient Name ID</font>
<div> </div>
</div>
<div style="line-break:after-white-space">
<table border="0" cellspacing="0" cellpadding="0" align="left" width="100%">
<tbody>
<tr>
<td style="background:#ffb900; padding:5pt 2pt 5pt 2pt"></td>
<td width="100%" cellpadding="7px 6px 7px 15px" style="background:#fff8e5; padding:5pt 4pt 5pt 12pt; word-wrap:break-word">
<div style="color:#222222"><span style="color:#222; font-weight:bold">Caution:</span> Please take care when clicking on links or opening attachments in emails that originate from outside of the university. When in doubt, contact the ITS service desk.
</div>
</td>
</tr>
</tbody>
</table>
<br>
<div>Hey everyone,
<div><span class="x_Apple-tab-span" style="white-space:pre"></span>In all my time of using shibboleth, I’ve never had a vendor say they want 0 attributes. But, alas, that’s what I’m faced with this week. However, they do want a persistent ID that’s non-identifiable
to a person? I’m not even sure how this would be possible, hence why I’m here asking. LOL</div>
<div><br>
</div>
<div>Any help will be greatly appreciated…</div>
<div><br>
</div>
<div>This is what they asked for: "Do you have the option to send an opaque, unique, and unchanging user identifier? "</div>
<div><br>
</div>
<div>Also in their metadata they have:</div>
<div>
<p style="margin-top: 0px; margin-bottom: 0px;margin:0px; font-stretch:normal; line-height:normal; font-family:"Andale Mono"; color:rgb(47,255,18); background-color:rgba(0,0,0,0.9)">
<span style="font-variant-ligatures:no-common-ligatures"> <NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified</NameIDFormat></span></p>
<p style="margin-top: 0px; margin-bottom: 0px;margin:0px; font-stretch:normal; line-height:normal; font-family:"Andale Mono"; color:rgb(47,255,18); background-color:rgba(0,0,0,0.9)">
<span style="font-variant-ligatures:no-common-ligatures"> <NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress</NameIDFormat></span></p>
<p style="margin-top: 0px; margin-bottom: 0px;margin:0px; font-stretch:normal; line-height:normal; font-family:"Andale Mono"; color:rgb(47,255,18); background-color:rgba(0,0,0,0.9)">
<span style="font-variant-ligatures:no-common-ligatures"> <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</NameIDFormat></span></p>
<p style="margin-top: 0px; margin-bottom: 0px;margin:0px; font-stretch:normal; line-height:normal; font-family:"Andale Mono"; color:rgb(47,255,18); background-color:rgba(0,0,0,0.9)">
<span style="font-variant-ligatures:no-common-ligatures"> <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat></span></p>
</div>
<div><br>
</div>
<div>Which I don’t understand, LOL.</div>
<div><br>
</div>
<div>
<div>Thanks</div>
</div>
<div><br>
</div>
<div>Mel</div>
<div><br>
<div>
<div style="color:rgb(0,0,0); font-family:Helvetica; font-size:12px; font-style:normal; font-variant-caps:normal; font-weight:normal; letter-spacing:normal; orphans:auto; text-align:start; text-indent:0px; text-transform:none; white-space:normal; widows:auto; word-spacing:0px; text-decoration:none">
<span style="font-size:14px"><font color="#007236"><b>Melvin Lasky</b><br>
Associate Director of Enterprise Architecture</font><br>
<br>
</span></div>
<span><img alt="1.jpeg" data-outlook-trace="F:1|T:1" src="cid:30040C3B-58F3-41D0-91CF-B57E6B6E2FB7@manhattan.edu"></span>
<div style="color:rgb(0,0,0); font-family:Helvetica; font-size:12px; font-style:normal; font-variant-caps:normal; font-weight:normal; letter-spacing:normal; orphans:auto; text-align:start; text-indent:0px; text-transform:none; white-space:normal; widows:auto; word-spacing:0px; text-decoration:none">
<span style="font-size:14px"><br>
<br>
<br>
Riverdale, NY 10471<br>
Phone: 718-862-7410<br>
melvin.lasky@manhattan.edu<br>
www.manhattan.edu</span><br>
<br>
</div>
</div>
<br>
</div>
</div>
</div>
</body>
</html>