duplicate attribute value issue in idp 2.3.3

[Cantor, Scott E.]

On 8/2/11 12:26 PM, "Chad La Joie" <lajoie at itumi.biz> wrote:

>It's really nothing to do with SAML 1 vs 2.

The advice we give in general is to use the Subject to carry the NameID
with SAML 2.0, which in this particular case isn't subject to the bug,
that's all I meant.

>  The correct format is based on XMLObjects (and the only
>attribute that is based on XMLObjects unless there are IdP extensions
>that creates XMLObject values) and so is affected by this.

The correct format is, but a quirk of the IdP is that if you want it in
the Subject, you have to attach a String-based encoder to the attribute
definition, so that's a way around it for SAML 2.0 at least. No help with
SAML 1.1, so I'll shut up about it.

-- Scott