Question regarding eduPersonTargetedID and ComputedID

[Kasa, Nubli]

Thanks Scott! 

Nubli

-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Cantor, Scott
Sent: Monday, October 22, 2012 5:48 PM
To: Shib Users
Subject: Re: Question regarding eduPersonTargetedID and ComputedID

On 10/22/12 5:03 PM, "Kasa, Nubli" <mmohdkas at indiana.edu> wrote:

>Hi there,
> 
>     We have eduPersonTargetedID implemented by having ComputedID as 
>its dependency (instead of using the storeId method). Naturally, we 
>also release eduPersonTargetedID as a ³persistent id² to SPs.

That's a great illustration of the horrible terminology we created.

> However, I was wondering if we need to create a custom ³persistent id² 
>Principal Connector that depends on ComputedID? since there are two 
>³transient id² principal connector specified by default but there is 
>none specified for persistent id.

Well, firstly, you can't. Those aren't reversible. Secondly, you don't need a principal connector unless you need to reverse them for attribute queries and are using them as the subject of assertions that would lead to queries.

> 
>     Secondly, we did not specify a good ³salt² value for our 
>ComputedID attribute. What would be the consequences of changing the salt value now?

Changing all the values, I would imagine.

> Would the SPs update their ³persistent id² on their end?

Well, they'd have to. Will they? Doubtful.

-- Scott


--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net