[IdPv3] State Management and Clustering

[Paul Hethmon]

On 10/27/11 9:10 AM, "Etienne Dysli" <etienne.dysli at unil.ch> wrote:


>Still, this state data exchange increases traffic between the user's
>browser and the IdP. Is this worse than increased intra-cluster traffic?
>The answer is different for every deployer I guess...

I would tend to lean towards the back end solution myself. Users,
browsers, and cookies can't be trusted. It's the old saying about software
developers versus the universe creating better idiots. The idiots always
win. That doesn't even consider those with actual malice.

I did not find plugging in Infinispan very difficult for Shib 2. I've got
permission to release what I've done there, but just haven't got it to a
state where I feel I can deploy it myself much less release it. Should be
soon though.

Paul