Default RP config for SAML 1 and attribute-release ?

[Cantor, Scott]

On 12/21/14, 11:00 PM, "Tom Zeller" <tzeller at dragonacea.biz> wrote:
>
>> The predicate I wired in for the flow will automatically turn it off 
>>for 
>> SAML 1 though, if you change the per-attribute setting.
>
>Ah, that I did not know.

More accurately, it will turn it off if the per-attribute flag is true AND 
the includeAttributeStatement setting is false.

<property name="activationCondition">
  <bean parent="shibboleth.Conditions.OR">
    <constructor-arg>
      <bean parent="shibboleth.Conditions.NOT">
        <constructor-arg value="%{idp.consent.allowPerAttribute:false}" />
      </bean>
    </constructor-arg>
    <constructor-arg>
      <bean 
class="net.shibboleth.idp.saml.profile.config.logic.IncludeAttributeStateme
ntPredicate" />
    </constructor-arg>
  </bean>
        </property>

-- Scott