idpv3 testing: clientIP in audit logs and consent jdbc ?
Cantor, Scott
cantor.2 at osu.edu
Fri Jan 30 13:58:09 EST 2015
> > Consent/uApprove: our current idp uses mysql database for uApprove
> > consent. Is it possible(how) to configure idpv3 to use database storage for
> > consent (I didn't find any docs for this) ?
>
> Yes. I believe it's straightforward. I'll reply with an example.
idp.consent.StorageService is the property with the bean ID of the StorageService to use. So, basically, declare in global.xml or in intercept/profile-intercept.xml and put bean name in that property in idp.properties
We don't have examples done up of JDBC storage services yet. The Javadoc for that is here [1], it's Hibernate based. Daniel can probably write up an example.
> > Is the v3 consent module tolerant(asks user for consent and allows
> > login to continue) to jdbc/database errors ?
>
> In general yes, but I have not rigorously tested. I guess it depends
> on the error, but I think I understand what you are asking.
I'm not sure if we did a property for that? I did for other things certainly.
-- Scott
[1] https://shibboleth.net/cgi-bin/java-opensaml.cgi/org.opensaml.storage.impl.JPAStorageService
More information about the users
mailing list