SP: making a saml attribute out of a header

[Peter Schober]

* Cantor, Scott <cantor.2 at osu.edu> [2012-09-27 23:22]:
> On 9/27/12 4:44 PM, "Marc Boorshtein" <mboorshtein at gmail.com> wrote:
> 
> >This might be a dumb question, but is there a way to tell shib to put all
> >attributes as headers?
> 
> No, how could it? It wouldn't know what you want to call them.

What's provided as FriendlyName? Though that might potentially allow
circumventing all kinds of policies (send OID for phone number and
claim for it to be ePPN?), so I'm not actually suggesting it.

Taking the attribute Name from the assertion might be another
option. But then people will start hardcoding rules based on such
names and lose the abstraction that the SP provides for them (SAML1 vs
SAML2 names, etc.)

So your question above should probably remain rhetorical,
-peter