Migration issues with shibboleth.JPAStorageService to JDBCStorageService

Cantor, Scott cantor.2 at osu.edu
Mon Feb 12 13:24:15 UTC 2024


> I can confirm, that the our production IdP only holdes integer values in the
> table `storagerecords`.

That's just not possible for consent records. There are likely some other use cases where the data stored is much simpler, but those are different records. The data is *not* uniform by any means.

The class that's underneath the serializing of consent records is net.shibboleth.idp.consent.storage.impl.ConsentSerializer and if you look at it, it's obviously creating JSON data.

> Our IdP runs for years now and never had any issues regarding
> authentification.

Consent != authentication and it's not a requirement (or at all advisable) to store anything but consent that way that would prevent a login.

-- Scott




More information about the users mailing list