RequestedAttributes and EntityAttributes

[Cantor, Scott]

On 6/17/14, 5:46 AM, "Rod Widdowson" <rdw at steadingsoftware.com> wrote:
>>
>> It probably should happen on the inbound context, inside the per-profile
>> config handler chain
>
>So If I'm understanding you correctly, and reading the flows right, about
>the same time as this (in the SAML2 abstract flow)

No, probably well before, either in the per-profile handler chain or since
this isn't really about security, we might just run it
profile-independently in a wrapped message handler inside the
DecodeMessage action-state. As long as it runs after SAMLMetadataLookup.

>>and then we'd modify the current profile action that
>> copies inbound metadata context to outbound context to copy that one
>>also.
>
>Looks like this is InitializeOutboundMessageContext...

Yes. I'm not sure in practice that anything will actually look at this
particular context on the outbound side, but it's good practice to copy it.

-- Scott