<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body style="overflow-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;">
Note that you can also have different source attributes for different relying parties (this is for NameID unspecified but you get the point):
<div>saml-nameid.xml:</div>
<div>
<div> <util:list id="shibboleth.SAML2NameIDGenerators"></div>
<div>[…]</div>
<div>
<div> <!-- Default --></div>
<div> <bean parent="shibboleth.SAML2AttributeSourcedGenerator"</div>
<div> p:format="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified"</div>
<div> p:attributeSourceIds="#{ {'eduPersonPrincipalName'} }" /></div>
</div>
<div><br>
</div>
<div>
<div> <bean parent="shibboleth.SAML2AttributeSourcedGenerator"</div>
<div> p:format="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified"</div>
<div> p:attributeSourceIds="#{ {‘uid'} }"></div>
<div><br>
</div>
<div> <!-- Sonarqube needs to get eppn for user mapping --></div>
<div> <property name="activationCondition"></div>
<div> <bean parent="shibboleth.Conditions.RelyingPartyId" c:candidates="#{{</div>
<div> ’https://example.com/vendor'</div>
<div> }}" /></div>
<div> </property></div>
<div> </bean></div>
</div>
<div>[…]</div>
<div><br>
</div>
<div>BR,</div>
<div>- Simon</div>
<div><br>
<blockquote type="cite">
<div>On 13 Aug 2025, at 21:16, IAM David Bantz via users <users@shibboleth.net> wrote:</div>
<br class="Apple-interchange-newline">
<div>
<div dir="ltr">
<div>
<div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-alternates: normal; font-size-adjust: none; font-kerning: auto; font-feature-settings: normal; font-width: normal; font-size: 10px; line-height: normal; font-family: Menlo;">
<font><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">We did this for National Clearing House a while back which produces what you're asking for;<br>
if redone today I'd use </span><span style="font-variant-ligatures:no-common-ligatures">samlSubjectID as the basis rather than eduPersonUniqueID<br>
<br>
and if we had control over the SP metadata, we'd do it with metadata-driven attribute release, but this SP is in InCommon.<br>
<br>
They were adamant in requiring this particular format and value in the subject.</span></font></div>
<div style="margin: 0px; font-style: normal; font-variant-caps: normal; font-weight: normal; font-width: normal; font-size: 10px; line-height: normal; font-family: Menlo; font-size-adjust: none; font-kerning: auto; font-variant-alternates: normal; font-variant-ligatures: normal; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-position: normal; font-variant-emoji: normal; font-feature-settings: normal; font-optical-sizing: auto; font-variation-settings: normal; color: rgb(64, 11, 217);">
<span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures"><br>
<br>
attribute-resolver:<br>
<br>
</span></div>
<div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-alternates: normal; font-size-adjust: none; font-kerning: auto; font-feature-settings: normal; font-width: normal; font-size: 10px; line-height: normal; font-family: Menlo; color: rgb(180, 36, 25);">
<span class="gmail-s1" style="font-variant-ligatures: no-common-ligatures;"><span class="gmail-Apple-converted-space"> </span></span><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"><AttributeDefinition
</span><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">id</span><span class="gmail-s1" style="font-variant-ligatures: no-common-ligatures;">=</span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures">"</span><span class="gmail-s5" style="font-variant-ligatures: no-common-ligatures; background-color: rgb(255, 255, 255);">nameid-persistent</span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures">-eduPersonUniqueID"</span><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)">
</span><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">xsi</span><span class="gmail-s6" style="font-variant-ligatures:no-common-ligatures;color:rgb(64,11,217)">:</span><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">type</span><span class="gmail-s1" style="font-variant-ligatures: no-common-ligatures;">=</span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures">"Simple"</span><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)">
></span></div>
<div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-alternates: normal; font-size-adjust: none; font-kerning: auto; font-feature-settings: normal; font-width: normal; font-size: 10px; line-height: normal; font-family: Menlo; color: rgb(46, 174, 187);">
<span class="gmail-s1" style="font-variant-ligatures: no-common-ligatures;"><span class="gmail-Apple-converted-space">
</span></span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures"><InputAttributeDefinition
</span><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">ref</span><span class="gmail-s1" style="font-variant-ligatures: no-common-ligatures;">=</span><span class="gmail-s7" style="font-variant-ligatures:no-common-ligatures;color:rgb(180,36,25)">"eduPersonUniqueID"</span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures">
/></span></div>
<div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-alternates: normal; font-size-adjust: none; font-kerning: auto; font-feature-settings: normal; font-width: normal; font-size: 10px; line-height: normal; font-family: Menlo; color: rgb(180, 36, 25);">
<span class="gmail-s1" style="font-variant-ligatures: no-common-ligatures;"><span class="gmail-Apple-converted-space">
</span></span><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"><AttributeEncoder
</span><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">xsi</span><span class="gmail-s6" style="font-variant-ligatures:no-common-ligatures;color:rgb(64,11,217)">:</span><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">type</span><span class="gmail-s1" style="font-variant-ligatures: no-common-ligatures;">=</span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures">"SAML2String"</span><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)">
</span><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">name</span><span class="gmail-s1" style="font-variant-ligatures: no-common-ligatures;">=</span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures">"nameid"</span><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)">
</span><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">friendlyName</span><span class="gmail-s1" style="font-variant-ligatures: no-common-ligatures;">=</span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures">"nameid"</span><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)">/></span></div>
<p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:10px;line-height:normal;font-family:Menlo;color:rgb(64,11,217)">
<span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures"></span></p>
<div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-alternates: normal; font-size-adjust: none; font-kerning: auto; font-feature-settings: normal; font-width: normal; font-size: 10px; line-height: normal; font-family: Menlo; color: rgb(46, 174, 187);">
<span class="gmail-s1" style="font-variant-ligatures: no-common-ligatures;"><span class="gmail-Apple-converted-space">
</span></span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures"></AttributeDefinition></span></div>
<div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-alternates: normal; font-size-adjust: none; font-kerning: auto; font-feature-settings: normal; font-width: normal; font-size: 10px; line-height: normal; font-family: Menlo; color: rgb(46, 174, 187);">
<span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures"><br>
</span></div>
<div style="margin: 0px; font-style: normal; font-variant-caps: normal; font-weight: normal; font-width: normal; font-size: 10px; line-height: normal; font-family: Menlo; font-size-adjust: none; font-kerning: auto; font-variant-alternates: normal; font-variant-ligatures: normal; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-position: normal; font-variant-emoji: normal; font-feature-settings: normal; font-optical-sizing: auto; font-variation-settings: normal; color: rgb(64, 11, 217);">
<span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">relying party override:<br>
<br>
<!-- National Student Clearing House wants "persistent" nameID<span class="gmail-Apple-converted-space">
</span>--></span></div>
<div style="margin: 0px; font-style: normal; font-variant-caps: normal; font-weight: normal; font-width: normal; font-size: 10px; line-height: normal; font-family: Menlo; font-size-adjust: none; font-kerning: auto; font-variant-alternates: normal; font-variant-ligatures: normal; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-position: normal; font-variant-emoji: normal; font-feature-settings: normal; font-optical-sizing: auto; font-variation-settings: normal;">
<span class="gmail-s2" style="font-variant-ligatures: no-common-ligatures;"><span class="gmail-Apple-converted-space">
</span></span><span class="gmail-s3" style="color:rgb(46,174,187);font-variant-ligatures:no-common-ligatures"><bean
</span><span class="gmail-s4" style="color:rgb(47,180,29);font-variant-ligatures:no-common-ligatures">parent</span><span class="gmail-s2" style="font-variant-ligatures: no-common-ligatures;">=</span><span class="gmail-s1" style="color:rgb(180,36,25);font-variant-ligatures:no-common-ligatures">"RelyingPartyByName"</span><span class="gmail-s3" style="color:rgb(46,174,187);font-variant-ligatures:no-common-ligatures">
</span><span class="gmail-s4" style="color:rgb(47,180,29);font-variant-ligatures:no-common-ligatures">c</span><span class="gmail-s5" style="color:rgb(64,11,217);font-variant-ligatures:no-common-ligatures">:</span><span class="gmail-s4" style="color:rgb(47,180,29);font-variant-ligatures:no-common-ligatures">relyingPartyIds</span><span class="gmail-s2" style="font-variant-ligatures: no-common-ligatures;">=</span><span class="gmail-s1" style="color:rgb(180,36,25);font-variant-ligatures:no-common-ligatures">"#{{'<a href="https://id/">https://id</a>.</span><span class="gmail-s6" style="font-variant-ligatures:no-common-ligatures;background-color:rgb(255,255,255)"><font color="#ff0000">studentcl</font></span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures"><span style="background-color:rgb(255,255,255)"><font color="#ff0000">earinghouse</font></span><font color="#b42419">.org/saml2/service-provider/myhub'}}"</font></span><span class="gmail-s3" style="color:rgb(46,174,187);font-variant-ligatures:no-common-ligatures">></span></div>
<div style="margin: 0px; font-style: normal; font-variant-caps: normal; font-weight: normal; font-width: normal; font-size: 10px; line-height: normal; font-family: Menlo; font-size-adjust: none; font-kerning: auto; font-variant-alternates: normal; font-variant-ligatures: normal; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-position: normal; font-variant-emoji: normal; font-feature-settings: normal; font-optical-sizing: auto; font-variation-settings: normal; color: rgb(180, 36, 25);">
<span class="gmail-s2" style="font-variant-ligatures: no-common-ligatures;"><span class="gmail-Apple-converted-space">
</span></span><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"><property
</span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">name</span><span class="gmail-s2" style="font-variant-ligatures: no-common-ligatures;">=</span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">"profileConfigurations"</span><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)">></span></div>
<div style="margin: 0px; font-style: normal; font-variant-caps: normal; font-weight: normal; font-width: normal; font-size: 10px; line-height: normal; font-family: Menlo; font-size-adjust: none; font-kerning: auto; font-variant-alternates: normal; font-variant-ligatures: normal; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-position: normal; font-feature-settings: normal; font-optical-sizing: auto; font-variation-settings: normal;">
<span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures"><span class="gmail-Apple-converted-space">
</span></span><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"><list></span></div>
<div style="margin: 0px; font-style: normal; font-variant-caps: normal; font-weight: normal; font-width: normal; font-size: 10px; line-height: normal; font-family: Menlo; font-size-adjust: none; font-kerning: auto; font-variant-alternates: normal; font-variant-ligatures: normal; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-position: normal; font-feature-settings: normal; font-optical-sizing: auto; font-variation-settings: normal;">
<span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures"><span class="gmail-Apple-converted-space">
</span></span><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"><bean
</span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">parent</span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">=</span><span class="gmail-s7" style="font-variant-ligatures:no-common-ligatures;color:rgb(180,36,25)">"SAML2.SSO"</span><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"><span class="gmail-Apple-converted-space"> </span></span></div>
<div style="margin: 0px; font-style: normal; font-variant-caps: normal; font-weight: normal; font-width: normal; font-size: 10px; line-height: normal; font-family: Menlo; font-size-adjust: none; font-kerning: auto; font-variant-alternates: normal; font-variant-ligatures: normal; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-position: normal; font-variant-emoji: normal; font-feature-settings: normal; font-optical-sizing: auto; font-variation-settings: normal; color: rgb(180, 36, 25);">
<span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"><span class="gmail-Apple-converted-space">
</span></span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">p</span><span class="gmail-s5" style="font-variant-ligatures:no-common-ligatures;color:rgb(64,11,217)">:</span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">nameIDFormatPrecedence</span><span class="gmail-s2" style="font-variant-ligatures: no-common-ligatures;">=</span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">"urn:oasis:names:tc:SAML:2.0:nameid-format:persistent"</span><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)">
></span></div>
<div style="margin: 0px; font-style: normal; font-variant-caps: normal; font-weight: normal; font-width: normal; font-size: 10px; line-height: normal; font-family: Menlo; font-size-adjust: none; font-kerning: auto; font-variant-alternates: normal; font-variant-ligatures: normal; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-position: normal; font-feature-settings: normal; font-optical-sizing: auto; font-variation-settings: normal;">
<span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures"><span class="gmail-Apple-converted-space">
</span></span><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"></bean></span></div>
<div style="margin: 0px; font-style: normal; font-variant-caps: normal; font-weight: normal; font-width: normal; font-size: 10px; line-height: normal; font-family: Menlo; font-size-adjust: none; font-kerning: auto; font-variant-alternates: normal; font-variant-ligatures: normal; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-position: normal; font-feature-settings: normal; font-optical-sizing: auto; font-variation-settings: normal; min-height: 11px;">
<span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures"></span><br>
</div>
<div style="margin: 0px; font-style: normal; font-variant-caps: normal; font-weight: normal; font-width: normal; font-size: 10px; line-height: normal; font-family: Menlo; font-size-adjust: none; font-kerning: auto; font-variant-alternates: normal; font-variant-ligatures: normal; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-position: normal; font-feature-settings: normal; font-optical-sizing: auto; font-variation-settings: normal;">
<span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures"><span class="gmail-Apple-converted-space">
</span></span><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"></list></span></div>
<div style="margin: 0px; font-style: normal; font-variant-caps: normal; font-weight: normal; font-width: normal; font-size: 10px; line-height: normal; font-family: Menlo; font-size-adjust: none; font-kerning: auto; font-variant-alternates: normal; font-variant-ligatures: normal; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-position: normal; font-variant-emoji: normal; font-feature-settings: normal; font-optical-sizing: auto; font-variation-settings: normal; color: rgb(46, 174, 187);">
<span class="gmail-s2" style="font-variant-ligatures: no-common-ligatures;"><span class="gmail-Apple-converted-space">
</span></span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures"></property></span></div>
<p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:10px;line-height:normal;font-family:Menlo;color:rgb(64,11,217)">
</p>
<div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-alternates: normal; font-size-adjust: none; font-kerning: auto; font-feature-settings: normal; font-width: normal; font-size: 10px; line-height: normal; font-family: Menlo; color: rgb(46, 174, 187);">
<span class="gmail-s2" style="font-variant-ligatures: no-common-ligatures;"><span class="gmail-Apple-converted-space"> </span></span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures"></bean><br>
<br>
attribute-filter rule:</span></div>
<div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-alternates: normal; font-size-adjust: none; font-kerning: auto; font-feature-settings: normal; font-width: normal; font-size: 10px; line-height: normal; font-family: Menlo; color: rgb(64, 11, 217);">
<span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures"><br>
</span></div>
<div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-alternates: normal; font-size-adjust: none; font-kerning: auto; font-feature-settings: normal; font-width: normal; font-size: 10px; line-height: normal; font-family: Menlo; color: rgb(64, 11, 217);">
<span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures"><!-- ePUID released to appear as persistent NameID --></span></div>
<div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-alternates: normal; font-size-adjust: none; font-kerning: auto; font-feature-settings: normal; font-width: normal; font-size: 10px; line-height: normal; font-family: Menlo; color: rgb(180, 36, 25);">
<span class="gmail-s2" style="font-variant-ligatures: no-common-ligatures;"><span class="gmail-Apple-converted-space">
</span></span><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"><AttributeRule
</span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">attributeID</span><span class="gmail-s2" style="font-variant-ligatures: no-common-ligatures;">=</span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">"nameid-persistent-eduPersonUniqueID"</span><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)">></span></div>
<div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-alternates: normal; font-size-adjust: none; font-kerning: auto; font-feature-settings: normal; font-width: normal; font-size: 10px; line-height: normal; font-family: Menlo; color: rgb(46, 174, 187);">
<span class="gmail-s2" style="font-variant-ligatures: no-common-ligatures;"><span class="gmail-Apple-converted-space">
</span></span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures"><PermitValueRule
</span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">xsi</span><span class="gmail-s5" style="font-variant-ligatures:no-common-ligatures;color:rgb(64,11,217)">:</span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">type</span><span class="gmail-s2" style="font-variant-ligatures: no-common-ligatures;">=</span><span class="gmail-s6" style="font-variant-ligatures:no-common-ligatures;color:rgb(180,36,25)">"ANY"</span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">
/></span></div>
<div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-alternates: normal; font-size-adjust: none; font-kerning: auto; font-feature-settings: normal; font-width: normal; font-size: 10px; line-height: normal; font-family: Menlo; color: rgb(46, 174, 187);">
<span class="gmail-s2" style="font-variant-ligatures: no-common-ligatures;"><span class="gmail-Apple-converted-space">
</span></span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures"></AttributeRule></span></div>
<div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-alternates: normal; font-size-adjust: none; font-kerning: auto; font-feature-settings: normal; font-width: normal; font-size: 10px; line-height: normal; font-family: Menlo; color: rgb(180, 36, 25);">
<span class="gmail-s2" style="font-variant-ligatures: no-common-ligatures;"><span class="gmail-Apple-converted-space">
</span></span><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"><AttributeRule
</span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">attributeID</span><span class="gmail-s2" style="font-variant-ligatures: no-common-ligatures;">=</span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">"eduPersonUniqueID"</span><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)">></span></div>
<div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-alternates: normal; font-size-adjust: none; font-kerning: auto; font-feature-settings: normal; font-width: normal; font-size: 10px; line-height: normal; font-family: Menlo; color: rgb(46, 174, 187);">
<span class="gmail-s2" style="font-variant-ligatures: no-common-ligatures;"><span class="gmail-Apple-converted-space">
</span></span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures"><PermitValueRule
</span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">xsi</span><span class="gmail-s5" style="font-variant-ligatures:no-common-ligatures;color:rgb(64,11,217)">:</span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">type</span><span class="gmail-s2" style="font-variant-ligatures: no-common-ligatures;">=</span><span class="gmail-s6" style="font-variant-ligatures:no-common-ligatures;color:rgb(180,36,25)">"ANY"</span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">
/></span></div>
<div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-alternates: normal; font-size-adjust: none; font-kerning: auto; font-feature-settings: normal; font-width: normal; font-size: 10px; line-height: normal; font-family: Menlo; color: rgb(46, 174, 187);">
<span class="gmail-s2" style="font-variant-ligatures: no-common-ligatures;"><span class="gmail-Apple-converted-space">
</span></span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures"></AttributeRule></span></div>
</div>
<br>
<div>and here's a snippet from the SAML response:<br>
<br>
</div>
<div>
<div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-alternates: normal; font-size-adjust: none; font-kerning: auto; font-feature-settings: normal; font-width: normal; font-size: 10px; line-height: normal; font-family: Menlo;">
<span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures"><span class="gmail-Apple-converted-space"> </span><saml2:Subject></span></div>
<div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-alternates: normal; font-size-adjust: none; font-kerning: auto; font-feature-settings: normal; font-width: normal; font-size: 10px; line-height: normal; font-family: Menlo;">
<span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures"><span class="gmail-Apple-converted-space">
</span><saml2:NameID Format="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent" NameQualifier="urn:mace:incommon:<a href="http://alaska.edu/">alaska.edu</a>" SPNameQualifier="<a href="https://id.studentclearinghouse.org/saml2/service-provider/myh">https://id.studentclearinghouse.org/saml2/service-provider/myh</a></span></div>
<div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-alternates: normal; font-size-adjust: none; font-kerning: auto; font-feature-settings: normal; font-width: normal; font-size: 10px; line-height: normal; font-family: Menlo;">
<span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">ub"><a href="mailto:30459959@alaska.edu">30459959@alaska.edu</a></saml2:NameID><br>
<br>
<br>
</span></div>
<div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-alternates: normal; font-size-adjust: none; font-kerning: auto; font-feature-settings: normal; font-width: normal; font-size: 10px; line-height: normal; font-family: Menlo;">
<span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures"><br>
</span></div>
<div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-alternates: normal; font-size-adjust: none; font-kerning: auto; font-feature-settings: normal; font-width: normal; line-height: normal;">
<span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures"><font face="arial, sans-serif">David St Pierre Bantz<br>
U Alaska IAM</font></span></div>
</div>
</div>
<br>
<div class="gmail_quote gmail_quote_container">
<div dir="ltr" class="gmail_attr">On Wed, Aug 13, 2025 at 10:57 AM Cantor, Scott via users <<a href="mailto:users@shibboleth.net">users@shibboleth.net</a>> wrote:<br>
</div>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
> How would I get the IdP to use an attribute-sourced Name ID<br>
> generator that sends an attribute as the Name ID but with a<br>
> format of persistent?<br>
<br>
A persistent NameID is covered by <a href="https://shibboleth.atlassian.net/wiki/spaces/IDP5/pages/3199507892/PersistentNameIDGenerationConfiguration" rel="noreferrer" target="_blank">
https://shibboleth.atlassian.net/wiki/spaces/IDP5/pages/3199507892/PersistentNameIDGenerationConfiguration</a><br>
<br>
(plus the usual issue of telling the IdP to pick that Format of NameID)<br>
<br>
The "other" option is the approach used for the pairwise-id Attribute or OpenID pairwise sub claim, which is usually done with the ComputedId connector and then taking the value and doing the usual things with the result to produce an AttributDefinition on
top of that, usually via Scoped to add the domain suffix.<br>
<br>
Neither one of those produces an Attribute with a NameID as a value, and we do not intend anybody do that anymore. That's dead code and is undocumented.<br>
<br>
I do not believe for one second that much out there actually requires that, and I most definitely would never trust somebody's word that they did without seeing the code or testing myself.<br>
<br>
And even then I would never do it.<br>
<br>
-- Scott<br>
<br>
<br>
-- <br>
For Consortium Member technical support, see <a href="https://shibboleth.atlassian.net/wiki/x/ZYEpPw" rel="noreferrer" target="_blank">
https://shibboleth.atlassian.net/wiki/x/ZYEpPw</a><br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" target="_blank">
users-unsubscribe@shibboleth.net</a><br>
</blockquote>
</div>
-- <br>
For Consortium Member technical support, see https://shibboleth.atlassian.net/wiki/x/ZYEpPw<br>
To unsubscribe from this list send an email to users-unsubscribe@shibboleth.net<br>
</div>
</blockquote>
</div>
<br>
</div>
</body>
</html>