modify saml-namid

templates/etc/shibboleth-idp/conf/saml-nameid.properties.template.erb

@@ -5,13 +5,13 @@
 # settings
 
 # Comment out to disable legacy NameID generation via Attribute Resolver
-#idp.nameid.saml2.legacyGenerator = shibboleth.LegacySAML2NameIDGenerator
-#idp.nameid.saml1.legacyGenerator = shibboleth.LegacySAML1NameIdentifierGenerator
+idp.nameid.saml2.legacyGenerator = shibboleth.LegacySAML2NameIDGenerator
+idp.nameid.saml1.legacyGenerator = shibboleth.LegacySAML1NameIdentifierGenerator
 
 # Default NameID Formats to use when nothing else is called for.
 # Don't change these just to change the Format used for a single SP!
-#idp.nameid.saml2.default = urn:oasis:names:tc:SAML:2.0:nameid-format:transient
-#idp.nameid.saml1.default = urn:mace:shibboleth:1.0:nameIdentifier
+idp.nameid.saml2.default = urn:oasis:names:tc:SAML:2.0:nameid-format:transient
+idp.nameid.saml1.default = urn:mace:shibboleth:1.0:nameIdentifier
 
 # Set to shibboleth.StoredTransientIdGenerator for server-side transient ID storage
 #idp.transientId.generator = shibboleth.CryptoTransientIdGenerator
@@ -19,7 +19,7 @@
 # Persistent IDs can be computed on the fly with a hash, or managed in a database
 
 # For computed IDs, set a source attribute and a secret salt:
-idp.persistentId.sourceAttribute = shibboleth.StoredPersistentIdGenerator
+idp.persistentId.sourceAttribute = uid
 #idp.persistentId.useUnfilteredAttributes = true
 # Do *NOT* share the salt with other people, it's like divulging your private key.
 #idp.persistentId.algorithm = SHA