Bug #4019
Subject reported by CILogon does not appear to be consistent over time
Status:
Closed
Priority:
Normal
Assignee:
Category:
Authentication, Authorization
Target version:
Start date:
2014-10-01
Due date:
2014-10-01
% Done:
100%
Milestone:
None
Product Version:
*
Story Points:
Sprint:
Description
I logged on to the production portal a couple months ago using the University of Kansas IdP and obtained a subject of:
CN=David Vieglais A7151,O=University of Kansas,C=US,DC=cilogon,DC=org
Logging on today, my subject is now:
CN=David Vieglais A2105,O=University of Kansas,C=US,DC=cilogon,DC=org
This lack of consistency is a serious problem for managing identity equivalence within DataONE. It is not clear if this is an issue with the IdP (KU) or with CILogon.
Will discuss issue with Jim Basney.
History
#1 Updated by Dave Vieglais about 11 years ago
- Status changed from New to In Progress
#2 Updated by Dave Vieglais about 11 years ago
Jim and Terry indicate that they should be able to support a notification page that appears during the authentication step if the subject information reported by the IdP changes.
#3 Updated by Dave Vieglais about 10 years ago
- Start date set to 2014-10-01
- Target version set to Maintenance Backlog
- Due date set to 2014-10-01
#4 Updated by Dave Vieglais over 7 years ago
- Status changed from In Progress to Closed
- % Done changed from 0 to 100
