Question

[Rod Widdowson]

> Please how does Shibboleth implement the attributes push profile for encrypted attributes?

Are you cognizant with the "XML Encryption Syntax and Processing" spec?  If so you might want to read [1] https://www.w3.org/TR/2002/REC-xmlenc-core-20021210/Overview.html#
Or are you willing to trust Sanutario?

I'd start here [1] and work up.  Of course you'll need to understand Spring Web Flow, but that’s pretty obvious.  A decent IDE or careful use of grep will help too.

[1] http://svn.shibboleth.net/view/java-identity-provider/trunk/idp-conf/src/main/resources/system/flows/saml/saml2/sso-post-flow.xml?view=co&revision=5203&content-type=text%2Fplain

Enjoy!

Rod