DataSealer dependencies

[Paul B. Henson]

> From: Cantor, Scott
> Sent: Monday, March 07, 2016 12:27 PM
> 
> - client-side storage (*)
> - crypto strategy for transient IDs (*)
> - serialization of passwords saved into authentication results
> - a logout dependency that I think is baked in but not actually being used

I'm using server-side storage for sessions, and the StoredTransientIdGenerator, which takes care of the first two deps. I'm not sure about the third use case? How does that use the data sealer key exactly? For now, I guess I need to keep it around just so the idp will run :). But do I need to rotate it for security purposes? Do I need to replicate it between cluster members?

> I would suggest filing a bug and we can maybe figure out how to get
> everything to start up safely if none of the features are being used.

IDP-942, thanks much.

--
Paul B. Henson  |  (909) 979-6361  |  http://www.cpp.edu/~henson/
Operating Systems and Network Analyst  |  henson at cpp.edu
California State Polytechnic University  |  Pomona CA 91768