Page History
...
The contents of the eduPersonTargetedID attribute is a SAML 2.0 persistent NameID. As such Persistent Name Identifiers and eduPersonTargetedID can be used interchangably. persistent NameID. This is sometimes called a "service-specific pseudonym" in that it's an opaque identifier that differs for each service a subject is accessing. I.e., Service A and Service B cannot profile (or match) subjects based on the identifier alone, as each service will know the subject by a different NameID value.
Note that saml2int recommends to send transmit persistent NameIDs (called persistentId
in this documentation)
Examples:
in the Subject
of the SAML Assertion, not as an (eduPersonTargetedID) Attribute. Our own documentation on PersistentIDs covers both cases, sending the NameID in the Assertion's Subject as well as sending it as an Attribute.
Examples:
- Persistent Name IdentifierseduID.at Documentation on PersistentIDs
- http://saml2int.org/profile/current#section7