Anonymous Sessions?

[Andy Bennett]

Hi,

> how is it possible to have an anonymous session that is persistent in
> Shibboleth? Seems like the two contradict. Unless no sign in is
> involved? I guess I’m confused on the concept.

A "Persistent ID"
(https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPTargetedID
) is "anonymous" in so far as the SP doesn't know the users' real names
and they can't correlate them with known users at other SPs.

However, it is unique for that {user, IdP, SP} triple and so will be the
same every time a particular user authenticates.

It is "opaque" rather than "anonymous".

Is that what you were thinking of?



Regards,
@ndy

-- 
andyjpb at knodium.com
http://www.knodium.com/