{"type":"doc","content":[{"type":"paragraph","content":[{"text":"This describes a method that maintains persistent ids in local, independent, postgres databases. Automatic synchronicity is maintained due to each host updating its own database exactly the same for any combination of user and RP. In addition it allows for editing of persistent ids and the association of a persistent id with all members of an RP 'cluster'.","type":"text"}]},{"type":"heading","attrs":{"level":1},"content":[{"text":"Database","type":"text"}]},{"type":"paragraph","content":[{"text":"The database consists of a table for relying parties and a table for the persistent id (tgtids).","type":"text"}]},{"type":"heading","attrs":{"level":5},"content":[{"text":"database definitions","type":"text","marks":[{"type":"strong"}]}]},{"type":"codeBlock","content":[{"text":"CREATE TABLE rp (\n rpno integer,\n rpid text NOT NULL\n);\nALTER TABLE ONLY rp ADD CONSTRAINT rp_rpid_key UNIQUE (rpid);\nCREATE TABLE tgtid (\n rpno integer,\n regid character(32),\n tgtid character(32)\n);\nALTER TABLE ONLY tgtid ADD CONSTRAINT tgtid_regid_key UNIQUE (regid, rpno);","type":"text"}]},{"type":"paragraph","content":[{"text":"and a function that either returns an existing value or a new value","type":"text"}]},{"type":"heading","attrs":{"level":5},"content":[{"text":"tid2 function","type":"text","marks":[{"type":"strong"}]}]},{"type":"codeBlock","content":[{"text":" CREATE FUNCTION tid2(character, text) RETURNS character\n LANGUAGE plpgsql AS $_$\ndeclare\n my_tgtid char(32);\n my_rpno integer;\nbegin\n select into my_tgtid tgtid from tgtid,rp where tgtid.regid=$1 and rp.rpid=$2 and tgtid.rpno=rp.rpno;\n if not found then\n select into my_rpno rpno from rp where rpid=$2;\n select into my_tgtid md5(xxxxxxxxxxxxxxxxxx);\n INSERT INTO tgtid values (my_rpno, $1, my_tgtid);\n if not found then\n return my_tgtid;\n end if;\n end if;\n return my_tgtid;\nend;\n$_$;","type":"text"}]},{"type":"paragraph","content":[{"text":"where 'xxxxxxxxxxxxxxxxxx' is some combination of salt, rp and user, e.g.","type":"text"}]},{"type":"codeBlock","content":[{"text":" xxx..xxx == 'salt1'||$1||my_rpno||'salt2'","type":"text"}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"Maintenance of the ","type":"text"},{"text":"rp","type":"text","marks":[{"type":"strong"}]},{"text":" table","type":"text"}]},{"type":"paragraph","content":[{"text":"Any relying party that gets a persistent id in any way must be preloaded into the ","type":"text"},{"text":"rp","type":"text","marks":[{"type":"strong"}]},{"text":" table, and that all hosts must have the same rpno/rpid associations. At UW we have a script that parses the attribute filter file whenever it changes. That's as good a place as any to automate the process.","type":"text"}]},{"type":"heading","attrs":{"level":1},"content":[{"text":"Attribute Resolver Configuration","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]}]},{"type":"paragraph","content":[{"text":"The data connector for the persistent id is now a simple relational database connector.","type":"text"}]},{"type":"heading","attrs":{"level":5},"content":[{"text":"Data Connector","type":"text","marks":[{"type":"strong"}]}]},{"type":"codeBlock","content":[{"text":"\n \n EptidDataConnector\n \n \n \n \n","type":"text"}]},{"type":"paragraph","content":[{"text":"and the definition of EptidDataConnector is in global.xml","type":"text"}]},{"type":"heading","attrs":{"level":5},"content":[{"text":"eptid bean def","type":"text","marks":[{"type":"strong"}]}]},{"type":"codeBlock","content":[{"text":"","type":"text"}]},{"type":"paragraph","content":[{"text":" ","type":"text"}]},{"type":"paragraph","content":[{"text":" ","type":"text"}]}],"version":1}