IdPv3 direct NameID mapping default

Scott Koranda skoranda at gmail.com
Tue Sep 8 09:43:10 EDT 2015


Hello,

The default for IdPv3 for direct NameID mapping as recorded in
subject-c14n.xml in the shibboleth.NameTransformPredicate is
an empty whitelist--no relying parties by default can complete
an attribute query with a direct NameID mapping.

I am curious why that is the default?

Thanks,

Scott K


More information about the dev mailing list