attribute resolution during the login process

[Tom Zeller]

>>I suggest considering using the Attribute Authority as the interface
>>so you have filtering in addition to resolution.

> I think the attribute resolver will be the right choice, especially if I
> can get it to only get the attributes I need internally. This resolution
> is for the MCB to consume and not for the benefit of the relying party
> (where filtering is important).

> It's typically not worth running the filter because you're resolving
> attributes for "yourself" and don't tend to have policies that would apply
> to a dummy requester value.

Oh, I see that. I did not know what the MCB was until just now.

As an aside, does SAML define the word "Context" ? I am still getting
used to understanding what people mean when they say "Authentication
Context".