Shibboleth Developers

["Rod Widdowson" <>]

Will,
I tried this, but it I'm not sure it's full implemented.  When I get back to 
the IdP with the attribute request the opaque ID is just pulled from the 
<NameIdentifier> in the <AttributeQuery> into the request context as the 
principalName (where it then provides no help as the key for my LDAP 
search).

I'm guessing that your first instinct was right and there is more plumbing 
needed?
Rod

----- Original Message ----- 
From: "Will Norris" <>
To: 
<>
Sent: Tuesday, September 25, 2007 6:46 AM
Subject: Re: beta idp nameidentifier


> err uh, just kidding.  Turns out they just hadn't been wired in yet.   try 
> updating and add an AttributeDefinition of type "TransientId".
>
>
> On Sep 24, 2007, at 10:32 PM, Will Norris wrote:
>
> > opaque IDs are not part of the beta just yet.
> >
> > On Sep 24, 2007, at 3:57 PM, Jim Fox wrote:
> >
> > > I'm getting a nameidentifier of just my userid, e.g. "fox".
> > > How can I get the more opaque one, e.g. "ZODIBEM...TLDWY36QTA3RS"?
> > >
> > > Jim