* Alistair Young <[log in to unmask]> [2011-01-25 12:07]:
> Has anyone experienced personalisation problems when upgrading to
> Shib 2? I believe Shib 2 advertises SAML2 instead of Shibboleth as
> default, so the attributes released bear no resemblance to
> Shibboleth attributes. In particular, eduPersonTargetedID has no
> Scope in SAML2 and I think SPs use this as part of the
> personalisation process.
Check out
https://spaces.internet2.edu/display/SHIB2/NativeSPTargetedID
which has a 'Background' and 'Best practices' section (though not for
IdP, IIRC), also explaining the "botch" that is the DNS-scoped
eduPersonTargetedID.
HTH,
-peter
|