idpv3 testing: clientIP in audit logs and consent jdbc ?

Cantor, Scott cantor.2 at osu.edu
Fri Jan 30 13:58:09 EST 2015


> > Consent/uApprove: our current idp uses mysql database for uApprove
> > consent. Is it possible(how) to configure idpv3 to use database storage for
> > consent (I didn't find any docs for this) ?
> 
> Yes. I believe it's straightforward. I'll reply with an example.

idp.consent.StorageService is the property with the bean ID of the StorageService to use. So, basically, declare in global.xml or in intercept/profile-intercept.xml and put bean name in that property in idp.properties

We don't have examples done up of JDBC storage services yet. The Javadoc for that is here [1], it's Hibernate based. Daniel can probably write up an example.

> > Is the v3 consent module tolerant(asks user for consent and allows
> > login to continue) to jdbc/database errors ?
> 
> In general yes, but I have not rigorously tested. I guess it depends
> on the error, but I think I understand what you are asking.

I'm not sure if we did a property for that? I did for other things certainly.

-- Scott

[1] https://shibboleth.net/cgi-bin/java-opensaml.cgi/org.opensaml.storage.impl.JPAStorageService



More information about the users mailing list