duplicate attribute value issue in idp 2.3.3

[Kristof Bajnok]

On 2011. August 2. 17:35:05 Chad La Joie wrote:
> In practice, the only attribute this is applies to (unless you have
> some custom attribute encoders) are targeted IDs being encoded as SAML
> NameIDs (the format everyone should be using at this point).  The
> quick fix is what Arjuna said: move the release of that attribute out
> to its own policy.
> 
> Given the limited scope and ease of mitigating the problem I am not
> going to do an immediate IdP release for this unless additional errors
> show up that I haven't yet spotted in the code.

I don't know, how other federations cope with the "Please Give Me Some Opaque 
Persistent User Id" problem, but currently we achieve this via the SP 
requesting ePTID as an attribute. (There are some idps not being able to 
supply persistent name identifiers.)

Plus, our centrally generated attribute filter policies are grouped for each 
relying party, therefore there are certainly many attribute duplications.

I just wanted to add that this bug is indeed a blocker for us.

Kristof