IdP3 Clustering...
Cantor, Scott
cantor.2 at osu.edu
Thu Dec 1 11:15:48 EST 2016
> In fact, ComputedID is henceforth depreciated for that reason we use
> PersistentID with StoredID connector which generate random identifiers and
> store them in db.
Computing them hasn't been deprecated in any real way for a very long time. It's the only practical way to do them, a database is not a practical approach for the vast majority of deployers.
> It's easy to put in place dynamic PersistentID but it has some limitations ; it is
> not to possible to find a user with his PersistentID, revoke or modify the
> value of the PersistentID...
The former is possible with audit logging. The latter isn't possible, but if it ever came up, building a mechanism based on a sparse override file to force changes to the hashes would be well within any mildly competent Java developer's capability.
-- Scott
More information about the users
mailing list