ERROR in LOGS IdPv3

[John Morrison]

On Wed, 2016-08-24 at 11:48 +0000, Cantor, Scott wrote:
> On 8/24/16 3:55 AM, John Morrison wrote:
> > 
> > Should CAS even be going into the EPTID database?  
> 
> Assuming it resolves attributes and you're configuring an attribute to
> do so. Using attributes to derive persistentIDs is of course deprecated
> in any case.
> 
> > And there seems to be a limit of 255, should this be extended if
> > possible?
> 
> The formal limit on an entityID is 1024, but of course CAS doesn't use
> entityIDs.
> 
> -- Scott



OK, but what I don't get, I've enabled CAS on our IDP v3 server and
every CAS'd login is recored into the shibboleth/shibpid database, this
shouldn't be the case by default?

How do I stop this from happening, as you pointed out, using attributes
to derive persistentIDs, I have no Idea if our IdP is doing this or not.

I don't want CAS'd auths to be recorded in the shibpid at all.

How did I get into this mess in the first place :)

Regards,


/John