Targeted ID question

[Cantor, Scott]

On 6/26/13 3:26 PM, "Bryan E. Wooten" <bryan.wooten at utah.edu> wrote:

>Hi all,
> 
>We do not currently support eTPID, but now have a request for this
>attribute from an SP.
> 
>Can someone give me a clue on how to implement this? Is this something we
>can configure in our Idp or do we need to write some code? My google
>skills have failed me.

There are two plugins for it, one that generates a value on the fly by
hashing data and that can't support reversing the value into the original
user identity. It has various advantages and drawbacks.

The other uses a JDBC database and stores values there, so they can be
looked up. That's much more powerful, but requires a database.

If you're going to hash it, you need above all a stable non-name-based
seed for the process associated with each account. If you have a stable
IDM identifier, then that's usually workable. If you have business
process-assigned IDs that change alot due to wars between your HR and SIS
people, not so much.

-- Scott