IdP Configuration Pruning Tools
Klingenstein, Nate
nklingenstein at calstate.edu
Mon Sep 26 13:26:28 EDT 2016
All,
Swing and a miss on dependency graphing(and I can't write that). Next try.
People have written audit log parsing tools, but how about tools that compare those results to configuration? Examples operations I'd like to perform:
1) Do I have any attribute release rules that have been unused for the last month or referring to entities I don't recognize?
2) Am I loading any metadata providers that have been unused for the last month?
3) Which SP's have I actually sent computed persistentId's to (and did the rewrite of the generation code introduce any relevant nuance here?)
4) Do I have any attribute definitions that are completely unused?
Since we have a lot of IdP's to manage here, I'll kludge together a pile of scripts if these don't exist, but for the sake of the real CSU admins, you really want to stop me before that happens.
Take care,
Nate.
More information about the users
mailing list