Targeted ID question

[Robert Roll]

I believe I found the HASH plugin config in attribute-resolver.xml.. (Computed ID)

Is there a sample set up for the JDBC connector anywhere ? We're running 2.3.5 

Thanks,

Robert
________________________________________
From: users-bounces at shibboleth.net [users-bounces at shibboleth.net] on behalf of Cantor, Scott [cantor.2 at osu.edu]
Sent: Wednesday, June 26, 2013 1:36 PM
To: Shib Users
Subject: Re: Targeted ID question

On 6/26/13 3:26 PM, "Bryan E. Wooten" <bryan.wooten at utah.edu> wrote:

>Hi all,
>
>We do not currently support eTPID, but now have a request for this
>attribute from an SP.
>
>Can someone give me a clue on how to implement this? Is this something we
>can configure in our Idp or do we need to write some code? My google
>skills have failed me.

There are two plugins for it, one that generates a value on the fly by
hashing data and that can't support reversing the value into the original
user identity. It has various advantages and drawbacks.

The other uses a JDBC database and stores values there, so they can be
looked up. That's much more powerful, but requires a database.

If you're going to hash it, you need above all a stable non-name-based
seed for the process associated with each account. If you have a stable
IDM identifier, then that's usually workable. If you have business
process-assigned IDs that change alot due to wars between your HR and SIS
people, not so much.

-- Scott


--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net