IDP 3 clustering

[Hong Ye]

Scott,

On Jun 25, 2015, at 3:13 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:

>> According to the wiki page, I added "Crypto Transient ID Attribute
>> Definition","Crypto Transient Principal Connector" and dataSealer to the
>> configuration files.
> 
> That's a V2 thing, not a V3 thing.

We are currently running IDP 2.4. According to Pete Schober’s reply earlier, this has been brought forward to IDPv3.  Now I’m confused.

> 
>> Do I need to modify attribute-filter.xml to release
>> cryptoTransientId instead of transientId?
> 
> You shouldn't do any of it.

I’m not sure I understand what you mean. Our IDP releases transientid by default.  I added "Crypto Transient ID Attribute definition” in attribute-resolver,  but if I don’t release it in attribute-filter, how does the SP use cryptoTransientId?   

Thanks,
Hong

> 
> -- Scott
> 
> -- 
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net