IdP Attribute resolver and filter question

Cantor, Scott cantor.2 at osu.edu
Thu Jun 28 21:11:47 BST 2012


> If I have two "<resolver:AttributeEncoder xsi:type="enc:SAML2String" for
> one AttributeDefinition in the IdP's attribute-resolver.xml, in order to have
> multiple names for that same source attribute, what is the corresponding
> attribute-filter.xml rule to release that attribute under just one of those
> names? Or is it automatically released under all those names, and its up to
> the the SP to just look for one particular one?

Filters operate against IdP names, which are independent of the encoded names.

> If I'm reading the documentation correctly, the "attribute-filter.xml"
> AttributeRule element is targeted at the attributeID, and that attributeID is
> the name used in the "id" attribute in the AttributeDefinition element. And
> there is only the one "id" for that definition, no matter how many
> AttributeEncoders it contains.

Correct.

-- Scott



More information about the users mailing list