search

philsmart / raptor-model

the common data model for Raptor
1 stars 0 forks source link

Update Shibboleth IdP information model #1

Open rhyssmith opened 6 years ago

rhyssmith commented 6 years ago

As discussed in raptor-harvest#8, I think we should drop some of the stuff we currently store as it's a bit pointless to keep. What I said over there implies the model for a Shib IdP event should be

Timestamp | Raptor Harvest Entity ID | IdP Entity ID | SP Entity ID | Profile ID | Inbound Binding | Outbound Binding | Username | Authentication Context | Attribute List

(Possibly NameID Value, not sure).

And possibly an "authorised entityId" for users of which SAML IdP (with correct entitlement) are allowed to see it (blank means anyone), as discussed. We need to think about the best way to do that though.

philsmart commented 6 years ago

do we still want the resourceIdCategory in case we want internal/external?

rhyssmith commented 6 years ago

Probably worth keeping the column so that in the future users can tag specific resources as belonging to specific groups. Just won't use it initially.

philsmart commented 6 years ago

mmm, wondering if sessionId is useful to ezproxy?

philsmart commented 6 years ago

I have removed it