OIDC clustering

[Scott Cantor]

> But that doesn't apply to attributes for claims, where the data stays on the node, correct?

Attributes generally come from elsewhere, and get resolved at a lot of different points in different requests. In the rare cases that the data only exists during a authorization reques, it can be encoded into the tokens issued for recovery later, so it's trivial (size aside) to resolve data on one server and reissue it from the UserInfo endpoint on another by pulling it from the access token.

> I don't see attributes included as part of session storage.  Is there a way to specify a non-default storage service for them?

We don't store attributes, never have.

-- Scott