From 35751e3cf89abf69f11dff7f9a3396d8068becc8 Mon Sep 17 00:00:00 2001
From: Markus Krogh <markus@nordu.net>
Date: Fri, 29 Sep 2017 17:42:03 +0200
Subject: Use ENV for persistentiId, logging

---
 idp/template-config/edupersontargetdid.xml.add | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)
 create mode 100644 idp/template-config/edupersontargetdid.xml.add

(limited to 'idp/template-config/edupersontargetdid.xml.add')

diff --git a/idp/template-config/edupersontargetdid.xml.add b/idp/template-config/edupersontargetdid.xml.add
new file mode 100644
index 0000000..8601da6
--- /dev/null
+++ b/idp/template-config/edupersontargetdid.xml.add
@@ -0,0 +1,16 @@
+    <AttributeDefinition xsi:type="SAML2NameID" id="eduPersonTargetedID"
+                         nameIdFormat="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent"
+                         sourceAttributeID="computedId">
+        <Dependency ref="ComputedId" />
+        <AttributeEncoder xsi:type="SAML1XMLObject" name="urn:oid:1.3.6.1.4.1.5923.1.1.1.10" />
+        <AttributeEncoder xsi:type="SAML2XMLObject" name="urn:oid:1.3.6.1.4.1.5923.1.1.1.10" friendlyName="eduPersonTargetedID" />
+    </AttributeDefinition>
+
+
+    <!--  The V3 IdP uses a new dedicated service for configuring NameID generation. The legacy V2 approach of encoding attributes into identifiers using attribute-resolver.xml and special attribute encoders that generate NameIdentifiers or NameIDs instead of Attributes is supported for compatibility purposes, but is deprecated and may be removed from a future version.-->
+  <DataConnector id="ComputedId" xsi:type="ComputedId"
+      generatedAttributeID="computedId"
+      sourceAttributeID="%{idp.persistentId.sourceAttribute}"
+      salt="%{idp.persistentId.salt}">
+      <Dependency ref="myLDAP" />
+  </DataConnector>
-- 
cgit v1.1