DataConnector Implementation

[Cantor, Scott]

> Everything is working fine, but I don't understand one thing, when the
> connector is invoked after succesful login, I can not find any reference in any
> context or subcontext to the list of attributes requested (from my own
> DataConnector implementation)..

SPs in SAML rarely (and essentially only indirectly) request anything, so this information doesn't exist. You would have to know the information yourself.

> My concern is that I want different policies for different Service Providers, so
> after SSO each one receives a different subset of attributes from the user
> information. But If I don't receive the list of attributes I have to dispatch at
> that point (at DataConnector), seems that I'm always forced to retrieve all of
> the attributes and then the subsystem of xml files for filtering will take care
> of dispatching the appropiates attributes to the invoking SP. Is this true?

It is generally true because it must be, the information doesn't exist to do anything else.

> I'm missing something? In case it's true, would not be desirable in terms of
> performance to retrieve only the attributes needed at DataConnector?

Sure, and it's impossible in general.

-- Scott