Transient ID Attribute Definition
The Transient ID attribute definition exposes a randomly generated, short-lived, opaque identifier that can later be mapped back to the user by a Transient principal connector.
Define the Definition
A transient ID attribute definition starts with the same <resolver:AttributeDefinition>
element as all other attribute definitions and has a type attribute of xsi:type="ad:TransientId"
. Each definition must also have an id
attribute that assigns it an unique, among attribute definitions, identifier used to refer to defintion within the rest of the attribute resolver configuration.
This attribute definition supports the following, optional, attribute:
- lifetime - the lifetime of the generated identifier given in duration notation
<resolver:AttributeDefinition id="UNIQUE_ID" xsi:type="ad:TransientId"> <!-- Remaining configuration from the next step go here --> </resolver:AttributeDefinition>
While this attribute definition can have dependencies, like all other attribute definitions, they are never used. The transient ID comes exclusively from internal IdP state.