Shibboleth Developers

[Chad La Joie <>]

Adam Lantos wrote:
> When someone wants to use ComputedId (edupersontargetedid-style) as a
> SAML2 persistent NameID, one need to implement a custom
> principalconnector for this? 

It's not possible to do this.  Read the docs one name identifiers if you 
care why.

Wouldn't it be a lot easier to just
> store/cache all nameid information in the session store and look up
> principal name by nameid-sessionindex? If the session was indexed by
> the nameid value, back-channel code could easily look up the correct
> session IMHO.

No, as I already said, the user may not have a session.

--
SWITCH
Serving Swiss Universities
--------------------------
Chad La Joie, Software Engineer, Net Services
Werdstrasse 2, P.O. Box, 8021 Zürich, Switzerland
phone +41 44 268 15 75, fax +41 44 268 15 68
,
 http://www.switch.ch