IdP3 Clustering...

[Cantor, Scott]

On 11/30/16, 11:07 AM, "users on behalf of Marc SAHIN" <users-bounces at shibboleth.net on behalf of marc.sahin at univ-lyon2.fr> wrote:

>    We have two sites so we need one IdP and one db server(like Mysql) in each site in order to ensure BCP.

That's just not workable.

>    Both IdP will be actives on production, if the database replication can be master-slave, a user might have two
> different Persistent ID...etc until the replication(master will also overwrite dta in slave...) so doesn't it cause
> data loss or any dysfunction ?

That would be completely broken from an application point of view.

>    Lastly, are the IdP's entities confidential ? I mean that should we put in place a mechanism to protect the data
> some kind of db replication with ssl ?

Yes, absolutely.

But that kind of replication is simply not viable for persistent ID management.

-- Scott