send one value of multi?

[David Bantz]

I know I could define an ad hoc single-valued attribute in the resolver.  
I’ve done something similar a few times already.  But I understand the service to
require mail with the mail OID - not some ginned up ad hoc attribute.
So apparently it seems I need to somehow jigger the attribute release 
policy to only allow (an arbitrary) one of the set of values if that is possible. 

-- 
David Bantz


On Monday, 4 November 2013 at 08:44:11, Cantor, Scott (cantor.2 at osu.edu) wrote:

On 11/4/13, 12:36 PM, "David Bantz" <dabantz at alaska.edu> wrote:  

>Does anyone have a ready solution to releasing just one of the values of  
>a multi-valued attribute to an R&S service that requires the mail  
>attribute but breaks if sent multiple values of this multi-valued  
>attribute?  

I don't think there's any clean way unless you could base it on the value  
in some way.  

You could also create a second attribute definition for a single-valued  
version and use the same encoders, and just release it to that SP.  

-- Scott  


--  
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net  
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20131104/6203cefe/attachment.html