send one value of multi?

[Christopher Bongaarts]

On 11/4/2013 12:13 PM, David Bantz wrote:
> On Monday, 4 November 2013 at 09:03:43, Christopher Bongaarts 
> (cab at umn.edu <mailto://cab@umn.edu>) wrote:
>> you can have multiple attributes encoding to the same SAML attribute name
> Oh!  I did not realize that.  Thanks.  That should be enough wiggle 
> room...

The other gotcha that can pop up:  if you release the standard 
(multivalue) mail by default (or in this case to the R&S category), 
don't forget to exclude the oddball SP from that release.  In this case, 
it's probably easiest to configure a specific DenyAttributeValue rule 
for specific SP.

-- 
%%  Christopher A. Bongaarts   %%  cab at umn.edu          %%
%%  OIT - Identity Management  %%  http://umn.edu/~cab  %%
%%  University of Minnesota    %%  +1 (612) 625-1809    %%

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20131104/50369832/attachment.html