Reused usernames and persistentIds

Cantor, Scott cantor.2 at osu.edu
Thu Oct 23 12:18:21 EDT 2014


On 10/23/14, 11:56 AM, "Eric Goodman" <Eric.Goodman at ucop.edu> wrote:
>
>But I'll clarify that while Scott's advice is critical for computedId, it
>shouldn't be critical (though probably remains recommended, as noted on
>the wiki) for the storedId connector.

It's pretty much unrelated to that case.

>But the storedId connector generates the hash only on the FIRST assertion
>to the SP, and thereafter uses the stored value in the database.

That was for compatibility to help people migrate, but V3 doesn't require
that anymore, it's just a choice. It can just randomize the first one.

>I don't know enough about the storedId connector to claim that it
>actually successfully generates a separate ID if it gets an ID collision
>on create, but it certainly should.

It does.

-- Scott



More information about the users mailing list