Versions Compared

Old Version 33

changes.mady.by.user David Walker

Saved on

compared with

New Version 34

changes.mady.by.user trscavo@internet2.edu

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  • Documented Attribute Release Process
  • IdPs SHOULD support the urn:oasis:names:tc:SAML:2.0:nameid-format:persistent name identifier format and/or the eduPersonTargetedID attribute
    • stored or computed? (there are disadvantages with each approach)
  • IdPs SHOULD support the urn:oasis:names:tc:SAML:2.0:nameid-format:transient encrypted name identifier format (requires Shib IdP 2.3)
    • since this identifier can be reversed, it is especially useful for security incident response
  • Release of "basic" attributes w/o admin involvement (via consent or otherwise)

...