cirrusidentity/simplesamlphp-module-shib2idpnameid

Filter to generate generate PersistentNameID (and the value for eduPersonTargetedID) with the same algorithm as Shibboleth IdP does.

v2.0.2 2025-05-10 15:53 UTC

Requires

• simplesamlphp/composer-module-installer: ^1.1
• simplesamlphp/simplesamlphp: ^v2.3

Requires (Dev)

• friendsofphp/php-cs-fixer: ^3
• phpunit/phpunit: ^10
• rector/rector: ^0.18.3
• simplesamlphp/simplesamlphp-test-framework: ^1.7
• squizlabs/php_codesniffer: ^3.7
• vimeo/psalm: ^5

LGPL-2.1-only

• Tamás Frank
• Attila László

README

This module can generate PersistentNameID (and the value for eduPersonTargetedID) with the same algorithm as Shibboleth IdP does. You would need this module if you migrate your IdP from Shibboleth to SimpleSAMLphp, and don't want the ePTID values to be changed.

Usage

You have to use the same secretsalt as you did at Shibboleth IdP.

To ensure compatibility of persistent identifiers when migrating from Shibboleth to SimpleSAMLphp, you need to configure the module within the authproc.idp section of your IdP configuration.

For generating PersistentNameID, use the following configuration:

5 => array(
       'class' => 'shib2idpnameid:PersistentNameID',
       // Required
       'attribute' => 'uid',
       // Optional, defaults to `eduPersonTargetedID
       'attributename' => 'eduPersonTargetedID'
),

Alternatively, to generate a targeted ID, you can use:

5 => array(
       'class' => 'shib2idpnameid:PersistentNameID2TargetedID',
       // Optional
       'nameId' => true,
       // Optional, defaults to `eduPersonTargetedID`
       'attribute' => 'uid',
),