Our clustering solution for IdP v3

[Peter Schober]

* Julian Williams <julian.williams at it.ox.ac.uk> [2016-02-28 23:44]:
> have arrived at a cluster solution that we think will work for us
> but is a bit of a departure from anything I've seen documented. I'd
> like your feedback on this and whether we're doing anything crazy!

All of your concerns should be dealt with in IDPv3 (and even in IDPv2
when using Scott's contributed OSU login handler) using the data
sealer and no-shared clustering, *including* support for attribute
queries *without* the need for a database. All of that is documented,
too.
Also AFAIU computedIds are not reversible (i.e., the IDP cannot map
them back to a subject when presented with one in-bound) so those
would be useless for SPs that relied on attribute queries. You'd still
need to be able to issue (and probably keep announcing support for)
transientIDs.
-peter