Targeted ID question

[Cantor, Scott]

On 6/26/13 3:40 PM, "Robert Roll" <Robert.Roll at utah.edu> wrote:

>I do see the below in the attribute-resolver.xml file.
>Does this out of the box, uncommented work ?

Not unless all those specific settings are correct such as the LDAP
dependency name. Nothing in an IdP can ever work out of the box, it has to
be tailored to your requirements.

>Also, my understanding of Targeted ID is that it is Pseudo Anonymous ?

That's typically how it's termed.

>In that, if someone, like say from law enforcement came looking, it
>should be
>recoverable ?

It isn't, not with that strategy to support them, but usually there will
be other data available in the assertion you can use to correlate with
your logs.

> I'm assuming the "salt" algorithm is known ? If so, where is it ?

Salt is not an algorithm, it's just salt. The algorithm is a hash of some
set of data, you'd have to read the code.

>I guess one could actually go and compute ALL Computed ID's to figure it
>out
>if really needed ?

That isn't terribly practical, but yes, in theory.

-- Scott