OIDC MemcachedStorageService

[Henri Mikkonen]

On 9.8.2024 18.55, McLennan, Neil R via users wrote:
> I have a cluster of Shibboleth IDP's which works fine for SAML but does not work for OIDC, so I need to enable Memcache just for OIDC, but I am having trouble.
> 
> In global.xml I have shibboleth.MemcachedStorageService set up.
> 
> In oidc.properties I have
> idp.oidc.jwk.StorageService = shibboleth.MemcachedStorageService

That property is related to the caching of remote JWK sets, so it's not 
essential to be shared between the cluster nodes.

The property 'idp.oidc.revocationCache.StorageService' should point to a 
cluster-friendly storage service to enable revocation-state sharing 
between the nodes.

See: 
https://shibboleth.atlassian.net/wiki/spaces/IDPPLUGINS/pages/1376879266/OPAuthorization

> Do I need to change the following in oidc-clientinfo-resolvers.xml
> 
>     <bean id="ExampleStorageClientInformationResolver" parent="shibboleth.oidc.StorageClientInformationResolver"
>          p:storageService-ref="shibboleth.StorageService" />
> 
> To
> 
>     <bean id="ExampleStorageClientInformationResolver" parent="shibboleth.oidc.StorageClientInformationResolver"
>          p:storageService-ref="shibboleth.MemcachedStorageService" />

Only if you plan to use dynamic client registration.

https://shibboleth.atlassian.net/wiki/spaces/IDPPLUGINS/pages/1376879077/OPDynamicClientRegistration

BR,
Henri.