IDP Attribute Query

[Cantor, Scott]

On 2/27/12 9:53 AM, "Francesco Malvezzi" <francesco.malvezzi at unimore.it>
wrote:
>
>Is it not enought to ride the
>  <resolver:PrincipalConnector xsi:type="Direct"
>xmlns="urn:mace:shibboleth:2.0:resolver:pc" id="direct"
>
>nameIDFormat="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified" />
>which you maybe are not using elsewhere?
>(i.e. changing definition from Transient to Direct)
>
>So the attribute from the SP arrives to the IdP as a principal and you
>can build a (database)DataConnector with a filterTemplate like:

You're right, I'm sorry, that would probably work fine and be much simpler.

-- Scott