<div dir="ltr"><div>
<p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:10px;line-height:normal;font-family:Menlo"><font color="#000000"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">We did this for National Clearing House a while back which produces what you're asking for;<br>if redone today I'd use </span><span style="font-variant-ligatures:no-common-ligatures">samlSubjectID as the basis rather than eduPersonUniqueID<br><br>and if we had control over the SP metadata, we'd do it with metadata-driven attribute release, but this SP is in InCommon.<br><br>They were adamant in requiring this particular format and value in the subject.</span></font></p>
<p class="gmail-p1" style="margin:0px;font:10px Menlo;color:rgb(64,11,217)"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures"><br><br>attribute-resolver:<br><br>
</span></p><p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:10px;line-height:normal;font-family:Menlo;color:rgb(180,36,25)"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)"><span class="gmail-Apple-converted-space"> </span></span><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"><AttributeDefinition </span><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">id</span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">=</span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures">"</span><span class="gmail-s5" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0);background-color:rgb(255,255,255)">nameid-persistent</span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures">-eduPersonUniqueID"</span><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"> </span><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">xsi</span><span class="gmail-s6" style="font-variant-ligatures:no-common-ligatures;color:rgb(64,11,217)">:</span><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">type</span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">=</span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures">"Simple"</span><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"> ></span></p><p class="gmail-p2" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:10px;line-height:normal;font-family:Menlo;color:rgb(46,174,187)"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)"><span class="gmail-Apple-converted-space"> </span></span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures"><InputAttributeDefinition </span><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">ref</span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">=</span><span class="gmail-s7" style="font-variant-ligatures:no-common-ligatures;color:rgb(180,36,25)">"eduPersonUniqueID"</span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures"> /></span></p><p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:10px;line-height:normal;font-family:Menlo;color:rgb(180,36,25)"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)"><span class="gmail-Apple-converted-space"> </span></span><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"><AttributeEncoder </span><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">xsi</span><span class="gmail-s6" style="font-variant-ligatures:no-common-ligatures;color:rgb(64,11,217)">:</span><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">type</span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">=</span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures">"SAML2String"</span><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"> </span><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">name</span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">=</span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures">"nameid"</span><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"> </span><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">friendlyName</span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">=</span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures">"nameid"</span><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)">/></span></p><p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:10px;line-height:normal;font-family:Menlo;color:rgb(64,11,217)"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">
</span></p><p class="gmail-p2" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:10px;line-height:normal;font-family:Menlo;color:rgb(46,174,187)"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)"><span class="gmail-Apple-converted-space"> </span></span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures"></AttributeDefinition></span></p><p class="gmail-p2" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:10px;line-height:normal;font-family:Menlo;color:rgb(46,174,187)"><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures"><br></span></p><p class="gmail-p1" style="margin:0px;font:10px Menlo;color:rgb(64,11,217)"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">relying party override:<br><br><!-- National Student Clearing House wants "persistent" nameID<span class="gmail-Apple-converted-space"> </span>--></span></p><p class="gmail-p2" style="margin:0px;font:10px Menlo"><span class="gmail-s2" style="color:rgb(0,0,0);font-variant-ligatures:no-common-ligatures"><span class="gmail-Apple-converted-space"> </span></span><span class="gmail-s3" style="color:rgb(46,174,187);font-variant-ligatures:no-common-ligatures"><bean </span><span class="gmail-s4" style="color:rgb(47,180,29);font-variant-ligatures:no-common-ligatures">parent</span><span class="gmail-s2" style="color:rgb(0,0,0);font-variant-ligatures:no-common-ligatures">=</span><span class="gmail-s1" style="color:rgb(180,36,25);font-variant-ligatures:no-common-ligatures">"RelyingPartyByName"</span><span class="gmail-s3" style="color:rgb(46,174,187);font-variant-ligatures:no-common-ligatures"> </span><span class="gmail-s4" style="color:rgb(47,180,29);font-variant-ligatures:no-common-ligatures">c</span><span class="gmail-s5" style="color:rgb(64,11,217);font-variant-ligatures:no-common-ligatures">:</span><span class="gmail-s4" style="color:rgb(47,180,29);font-variant-ligatures:no-common-ligatures">relyingPartyIds</span><span class="gmail-s2" style="color:rgb(0,0,0);font-variant-ligatures:no-common-ligatures">=</span><span class="gmail-s1" style="color:rgb(180,36,25);font-variant-ligatures:no-common-ligatures">"#{{'<a href="https://id">https://id</a>.</span><span class="gmail-s6" style="font-variant-ligatures:no-common-ligatures;background-color:rgb(255,255,255)"><font color="#ff0000">studentcl</font></span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures"><span style="background-color:rgb(255,255,255)"><font color="#ff0000">earinghouse</font></span><font color="#b42419">.org/saml2/service-provider/myhub'}}"</font></span><span class="gmail-s3" style="color:rgb(46,174,187);font-variant-ligatures:no-common-ligatures">></span></p><p class="gmail-p2" style="margin:0px;font:10px Menlo;color:rgb(180,36,25)"><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)"><span class="gmail-Apple-converted-space"> </span></span><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"><property </span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">name</span><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">=</span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">"profileConfigurations"</span><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)">></span></p><p class="gmail-p3" style="margin:0px;font:10px Menlo;color:rgb(0,0,0)"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures"><span class="gmail-Apple-converted-space"> </span></span><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"><list></span></p><p class="gmail-p3" style="margin:0px;font:10px Menlo;color:rgb(0,0,0)"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures"><span class="gmail-Apple-converted-space"> </span></span><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"><bean </span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">parent</span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">=</span><span class="gmail-s7" style="font-variant-ligatures:no-common-ligatures;color:rgb(180,36,25)">"SAML2.SSO"</span><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"><span class="gmail-Apple-converted-space"> </span></span></p><p class="gmail-p2" style="margin:0px;font:10px Menlo;color:rgb(180,36,25)"><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"><span class="gmail-Apple-converted-space"> </span></span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">p</span><span class="gmail-s5" style="font-variant-ligatures:no-common-ligatures;color:rgb(64,11,217)">:</span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">nameIDFormatPrecedence</span><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">=</span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">"urn:oasis:names:tc:SAML:2.0:nameid-format:persistent"</span><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"> ></span></p><p class="gmail-p3" style="margin:0px;font:10px Menlo;color:rgb(0,0,0)"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures"><span class="gmail-Apple-converted-space"> </span></span><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"></bean></span></p><p class="gmail-p4" style="margin:0px;font:10px Menlo;color:rgb(0,0,0);min-height:11px"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures"></span><br></p><p class="gmail-p3" style="margin:0px;font:10px Menlo;color:rgb(0,0,0)"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures"><span class="gmail-Apple-converted-space"> </span></span><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"></list></span></p><p class="gmail-p5" style="margin:0px;font:10px Menlo;color:rgb(46,174,187)"><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)"><span class="gmail-Apple-converted-space"> </span></span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures"></property></span></p><p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:10px;line-height:normal;font-family:Menlo;color:rgb(64,11,217)">
</p><p class="gmail-p5" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:10px;line-height:normal;font-family:Menlo;color:rgb(46,174,187)"><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)"><span class="gmail-Apple-converted-space"> </span></span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures"></bean><br><br>attribute-filter rule:</span></p><p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:10px;line-height:normal;font-family:Menlo;color:rgb(64,11,217)"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures"><br></span></p><p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:10px;line-height:normal;font-family:Menlo;color:rgb(64,11,217)"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures"><!-- ePUID released to appear as persistent NameID --></span></p>
<p class="gmail-p2" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:10px;line-height:normal;font-family:Menlo;color:rgb(180,36,25)"><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)"><span class="gmail-Apple-converted-space"> </span></span><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"><AttributeRule </span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">attributeID</span><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">=</span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">"nameid-persistent-eduPersonUniqueID"</span><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)">></span></p>
<p class="gmail-p3" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:10px;line-height:normal;font-family:Menlo;color:rgb(46,174,187)"><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)"><span class="gmail-Apple-converted-space"> </span></span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures"><PermitValueRule </span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">xsi</span><span class="gmail-s5" style="font-variant-ligatures:no-common-ligatures;color:rgb(64,11,217)">:</span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">type</span><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">=</span><span class="gmail-s6" style="font-variant-ligatures:no-common-ligatures;color:rgb(180,36,25)">"ANY"</span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures"> /></span></p>
<p class="gmail-p3" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:10px;line-height:normal;font-family:Menlo;color:rgb(46,174,187)"><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)"><span class="gmail-Apple-converted-space"> </span></span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures"></AttributeRule></span></p>
<p class="gmail-p2" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:10px;line-height:normal;font-family:Menlo;color:rgb(180,36,25)"><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)"><span class="gmail-Apple-converted-space"> </span></span><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"><AttributeRule </span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">attributeID</span><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">=</span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">"eduPersonUniqueID"</span><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)">></span></p>
<p class="gmail-p3" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:10px;line-height:normal;font-family:Menlo;color:rgb(46,174,187)"><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)"><span class="gmail-Apple-converted-space"> </span></span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures"><PermitValueRule </span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">xsi</span><span class="gmail-s5" style="font-variant-ligatures:no-common-ligatures;color:rgb(64,11,217)">:</span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">type</span><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">=</span><span class="gmail-s6" style="font-variant-ligatures:no-common-ligatures;color:rgb(180,36,25)">"ANY"</span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures"> /></span></p>
<p class="gmail-p3" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:10px;line-height:normal;font-family:Menlo;color:rgb(46,174,187)"><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)"><span class="gmail-Apple-converted-space"> </span></span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures"></AttributeRule></span></p></div><br><div>and here's a snippet from the SAML response:<br><br></div><div>
<p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:10px;line-height:normal;font-family:Menlo;color:rgb(0,0,0)"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures"><span class="gmail-Apple-converted-space"> </span><saml2:Subject></span></p>
<p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:10px;line-height:normal;font-family:Menlo;color:rgb(0,0,0)"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures"><span class="gmail-Apple-converted-space"> </span><saml2:NameID Format="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent" NameQualifier="urn:mace:incommon:<a href="http://alaska.edu">alaska.edu</a>" SPNameQualifier="<a href="https://id.studentclearinghouse.org/saml2/service-provider/myh">https://id.studentclearinghouse.org/saml2/service-provider/myh</a></span></p>
<p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:10px;line-height:normal;font-family:Menlo;color:rgb(0,0,0)"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">ub"><a href="mailto:30459959@alaska.edu">30459959@alaska.edu</a></saml2:NameID><br><br><br></span></p><p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:10px;line-height:normal;font-family:Menlo;color:rgb(0,0,0)"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures"><br></span></p><p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;line-height:normal;color:rgb(0,0,0)"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures"><font face="arial, sans-serif">David St Pierre Bantz<br>U Alaska IAM</font></span></p></div></div><br><div class="gmail_quote gmail_quote_container"><div dir="ltr" class="gmail_attr">On Wed, Aug 13, 2025 at 10:57 AM Cantor, Scott via users <<a href="mailto:users@shibboleth.net">users@shibboleth.net</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">> How would I get the IdP to use an attribute-sourced Name ID<br>
> generator that sends an attribute as the Name ID but with a<br>
> format of persistent?<br>
<br>
A persistent NameID is covered by <a href="https://shibboleth.atlassian.net/wiki/spaces/IDP5/pages/3199507892/PersistentNameIDGenerationConfiguration" rel="noreferrer" target="_blank">https://shibboleth.atlassian.net/wiki/spaces/IDP5/pages/3199507892/PersistentNameIDGenerationConfiguration</a><br>
<br>
(plus the usual issue of telling the IdP to pick that Format of NameID)<br>
<br>
The "other" option is the approach used for the pairwise-id Attribute or OpenID pairwise sub claim, which is usually done with the ComputedId connector and then taking the value and doing the usual things with the result to produce an AttributDefinition on top of that, usually via Scoped to add the domain suffix.<br>
<br>
Neither one of those produces an Attribute with a NameID as a value, and we do not intend anybody do that anymore. That's dead code and is undocumented.<br>
<br>
I do not believe for one second that much out there actually requires that, and I most definitely would never trust somebody's word that they did without seeing the code or testing myself.<br>
<br>
And even then I would never do it.<br>
<br>
-- Scott<br>
<br>
<br>
-- <br>
For Consortium Member technical support, see <a href="https://shibboleth.atlassian.net/wiki/x/ZYEpPw" rel="noreferrer" target="_blank">https://shibboleth.atlassian.net/wiki/x/ZYEpPw</a><br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" target="_blank">users-unsubscribe@shibboleth.net</a><br>
</blockquote></div>