Our clustering solution for IdP v3
Tom Scavo
trscavo at gmail.com
Mon Feb 29 08:52:01 EST 2016
On Mon, Feb 29, 2016 at 8:27 AM, Peter Schober
<peter.schober at univie.ac.at> wrote:
>
> AFAIU computedIds are not reversible (i.e., the IDP cannot map
> them back to a subject when presented with one in-bound) so those
> would be useless for SPs that relied on attribute queries. You'd still
> need to be able to issue (and probably keep announcing support for)
> transientIDs.
Good point. This begs the question: Why would one ever assert a
computedid as a SAML2 Persistent NameID (as recommended by saml2int)?
Tom
More information about the users
mailing list