Default RP config for SAML 1 and attribute-release ?

[Cantor, Scott]

On 12/21/14, 10:42 PM, "Tom Zeller" <tzeller at dragonacea.biz> wrote:
>
>Well then, per-attribute should not be enabled for SAML 1. Correct ? 
>Because if ReleaseAttributes is not wired, the user's choices are not 
>honored.

Correct.

I left the default for per-attribute set to false, because I thought we 
wanted to go ahead and stick to basic uApprove behavior by default.

The predicate I wired in for the flow will automatically turn it off for 
SAML 1 though, if you change the per-attribute setting.

The only place it breaks down is if support for queries with a different 
kind of ID is enabled, but that's generally rare.

-- Scott