cirrusidentity/simplesamlphp-module-shib2idpnameid

Filter to generate generate PersistentNameID (and the value for eduPersonTargetedID) with the same algorithm as Shibboleth IdP does.

v2.0 2025-04-30 18:12 UTC

Requires

• simplesamlphp/composer-module-installer: ^1.1
• simplesamlphp/simplesamlphp: ^v2.3

Requires (Dev)

• friendsofphp/php-cs-fixer: ^3
• phpunit/phpunit: ^10
• rector/rector: ^0.18.3
• simplesamlphp/simplesamlphp-test-framework: ^1.7
• squizlabs/php_codesniffer: ^3.7
• vimeo/psalm: ^5

LGPL-2.1-only

• Tamás Frank
• Attila László

README

This module can generate PersistentNameID (and the value for eduPersonTargetedID) with the same algorithm as Shibboleth IdP does. You would need this module if you migrate your IdP from Shibboleth to SimpleSAMLphp, and don't want the ePTID values to be changed.

Usage

You have to use the same secretsalt as you did at Shibboleth IdP.

Put into the authproc.idp section:

5 => array(
       'class' => 'shib2idpnameid:PersistentNameID',
       // Required only when PersistentNameID2TargetedID class is used
       'nameId' => true,
       'attribute' => 'uid',
       'attributename' => 'eduPersonTargetedID'
),