Default RP config for SAML 1 and attribute-release ?

[Tom Zeller]

Scott,

> I just put the proposed default RP config in (and put a test resource in
> for the tests), and I went ahead and enabled the attribute-release flow.

Working on integration tests, and I'm confused. The attribute-release
flow is enabled for SAML 1, but not includeAttributeStatement, which
seems like a conflict, because no attributes are actually released,
but the user is prompted.

So, should the default RP config have :

 <bean parent="Shibboleth.SSO" p:includeAttributeStatement="true"
p:postAuthenticationFlows="attribute-release" />

instead of

 <bean parent="Shibboleth.SSO"  p:postAuthenticationFlows="attribute-release" />

?