Page Comparison

...

See the CustomNameIDGenerationConfiguration subtopic for detailed help with this feature.

Reference

Localtabgroup

Localtab-live

active	true
title	Properties

Properties defined in saml-nameid.properties to customize various aspects of default identifier generation behavior:

Property / Type / Default

Function

idp.transientId.generator

Bean ID of a TransientIdGenerationStrategy

shibboleth.CryptoTransientIdGenerator

Identifies the strategy plugin for generating transient IDs

idp.nameid.saml2.default

URI

urn:oasis:names:tc:SAML:2.0:nameid-format:transient

Default Format to generate if nothing else is indicated

idp.nameid.saml1.default

URI

urn:mace:shibboleth:1.0:nameIdentifier

Default Format to generate if nothing else is indicated

Localtab-live

title	Beans

Beans defined in saml-nameid.xml and related system configuration discussed above follow:

Bean ID	Type	Function
shibboleth.SAML2NameIDGenerators	List<SAML2NameIDGenerator>	SAML 2 NameID generator plugins to use
shibboleth.SAML1NameIdentifierGenerators	List<SAML1NameIdentifierGenerator>	SAML 1 NameIdentifier generator plugins to use
shibboleth.SAML2TransientGenerator	TransientSAML2NameIDGenerator	Plugins for generating transient identifiers using pluggable strategies
shibboleth.SAML1TransientGenerator	TransientSAML1NameIdentifierGenerator
shibboleth.StoredTransientIdGenerator	TransientIdGenerationStrategy	Strategy plugin that generates transient identifiers randomly and stores them in a server-side StorageService
shibboleth.CryptoTransientIdGenerator	TransientIdGenerationStrategy	Strategy plugin that generates transient identifiers by encrypting a subject identity into a long opaque string