Skip to content
Permalink
Browse files

Update grouper-subject-identifier

  • Loading branch information
khazelton committed Oct 12, 2020
1 parent 5bfa217 commit 485a68ca3f7c5202f10eba86e312e44eb1cc7644
Showing with 10 additions and 0 deletions.
  1. +10 −0 grouper-subject-identifier
@@ -1,3 +1,13 @@
Beth Halsema Today at 08:07
Chris or Chad, the subjectID references in the documentation and examples have referred to the system of record's unique identifier. Our university has such a unique identifier. In general, the unique identifier is correctly assigned.
But it is not guaranteed to be constant. Was the ID erroneously associated with another? Or maybe it wasn't and it should? We call them splits or merges. And as a result, it is then changed. It really isn't opaque, because others are able to manipulate it.
Would you recommend having one that is truly internal to the InCommon Trusted Access Platform ecosystem? One that only it knows about, and it doesn't change. The subject source would have this truly opaque identifier that only "we" know about it which maps to the system of record ID, username, name, etc.etc.etc.
Other than it is yet one more unique identifier and that the processing of the nightly data must incorporate it into the data, can you think of a reason not to do it?
Thank you! (edited)
6 replies

Chris Hyzer 12 hours ago
opaque means its not based on name generally, and wont change when someone changes their name. if its based on initials, but you have a policy not to change it, that is ok. You can adjust the subjectId in Grouper if things change. Of course you will have splits and merges, but it should happen very infrequently and only because matching isnt 100% right? whats an example of the id? if everyone has in the institution, i think you should probably use it, but we can discuss more :slightly_smiling_face:

Chris Hyzer 12 hours ago
at penn users who can log in have a pennkey which for me is mchyzer. we also all have a pennid which is the IDM id. mine is 10021368. The pennkey can change, so that is not our subjectid. the pennid doesnt change but sometime we have dupes and need to merge. the pennid is our subjectId

0 comments on commit 485a68c

Please sign in to comment.
You can’t perform that action at this time.