Our clustering solution for IdP v3

[Cantor, Scott]

 > Good point. This begs the question: Why would one ever assert a
> computedid as a SAML2 Persistent NameID (as recommended by saml2int)?

The downside to using hashed identifiers is the inability to reverse map them from logs, revoke them, roll them over into new ones, etc. Queries are a pretty unusual use case outside of VOs, and they can use alternate identifiers that are mappable, or I guess they can use a database and bite the bullet.

-- Scott