PersistentNameIDGenerationConfiguration - Can the identifiers be computed outside of Shibboleth IdPv3?

Cantor, Scott cantor.2 at osu.edu
Wed Mar 16 15:35:01 EDT 2016


On 3/16/16, 3:29 PM, "users on behalf of Rainer Hoerbe" <users-bounces at shibboleth.net on behalf of rainer at hoerbe.at> wrote:


>
>Agreed, but once targeted emails are used to reduce the angst of attribute release, cheap reversibility would be a good thing.

I'm not opposed in principle (obviously, I've been using the AES stuff for a very long time, before I ever put into the project), just being sensitive to the cognitive load here for people.

There is no limitation on anybody plugging this in themselves, but the extension interface isn't actually public at the moment. I don't think we'd object to making it public.

-- Scott



More information about the users mailing list