Contexts and attribute operations

Rod Widdowson rdw at steadingsoftware.com
Mon Dec 30 05:31:31 EST 2013


> Other than backward
> compatibility, what's the use case?

It's all backwards compatibility really, mostly I am concerned about the
legacy ECMA resolvers and filtering, but there are a few filters:

- Attribute[Issuer|Requester]EntityAttribute[Exact|Regexp]Match  (as opposed
to  AttributeInMetadata) need the Entity and

- Attribute[Issuer|Requester]NameIDFormatExactMatch need the SSODescriptor

Plus of course the EntityGroup filters (which are currently ported as is and
we need to deal with separately - and later - IDP-47 and IDP-48)

> For the requester metadata, I suggest we use a lookup strategy for that
> because we already have an context type for wrapping that,
> SamlMetadataContext.

That makes sense.  

> Well, my suggestion is that the we copy the string fields into the
> AttributeResolutionContext explicitly as data and we'll set those in the
> profile flow.

With the metadata dealt with by using the context that was designed for that
purpose, that now makes perfect sense.   I'll enter a case to clean this all
up and document it, with a view to starting (very) early in the new year (to
give others a chance to comment).

/Rod



More information about the dev mailing list