summaryrefslogtreecommitdiff
path: root/idp/template-config/edupersontargetdid.xml.add
diff options
context:
space:
mode:
authorMarkus Krogh <markus@nordu.net>2017-09-29 17:42:03 +0200
committerMarkus Krogh <markus@nordu.net>2017-09-29 17:42:03 +0200
commit35751e3cf89abf69f11dff7f9a3396d8068becc8 (patch)
tree9f20b007e8e787ea1a5345c2b7200018a2727a59 /idp/template-config/edupersontargetdid.xml.add
parentaf0294d5f773bc071128b1ec1712c62f587c7b0a (diff)
Use ENV for persistentiId, logging
Diffstat (limited to 'idp/template-config/edupersontargetdid.xml.add')
-rw-r--r--idp/template-config/edupersontargetdid.xml.add16
1 files changed, 16 insertions, 0 deletions
diff --git a/idp/template-config/edupersontargetdid.xml.add b/idp/template-config/edupersontargetdid.xml.add
new file mode 100644
index 0000000..8601da6
--- /dev/null
+++ b/idp/template-config/edupersontargetdid.xml.add
@@ -0,0 +1,16 @@
+ <AttributeDefinition xsi:type="SAML2NameID" id="eduPersonTargetedID"
+ nameIdFormat="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent"
+ sourceAttributeID="computedId">
+ <Dependency ref="ComputedId" />
+ <AttributeEncoder xsi:type="SAML1XMLObject" name="urn:oid:1.3.6.1.4.1.5923.1.1.1.10" />
+ <AttributeEncoder xsi:type="SAML2XMLObject" name="urn:oid:1.3.6.1.4.1.5923.1.1.1.10" friendlyName="eduPersonTargetedID" />
+ </AttributeDefinition>
+
+
+ <!-- The V3 IdP uses a new dedicated service for configuring NameID generation. The legacy V2 approach of encoding attributes into identifiers using attribute-resolver.xml and special attribute encoders that generate NameIdentifiers or NameIDs instead of Attributes is supported for compatibility purposes, but is deprecated and may be removed from a future version.-->
+ <DataConnector id="ComputedId" xsi:type="ComputedId"
+ generatedAttributeID="computedId"
+ sourceAttributeID="%{idp.persistentId.sourceAttribute}"
+ salt="%{idp.persistentId.salt}">
+ <Dependency ref="myLDAP" />
+ </DataConnector>