SAML2 attribute names breaking standards

Wessel, Keith kwessel at illinois.edu
Fri Nov 22 12:05:05 EST 2013


Thanks, Scott and Nate, for confirming my suspicions on this.

I've told the vendor no and asked them to change their approach, at least paying attention to the friendly name if nothing else. I'm not holding my breath, but we'll see what comes of it.

Keith


-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Cantor, Scott
Sent: Friday, November 22, 2013 10:24 AM
To: Shib Users
Subject: Re: SAML2 attribute names breaking standards

On 11/22/13, 10:50 AM, "Wessel, Keith" <kwessel at illinois.edu> wrote:
>
>I'm sure this breaks some accepted standards out there. Other than that,
>is there a technical reason I shouldn't do this?

Pretty much the reason is that every step you take in this direction is a
burden your configuration will carry. Eventually the weight of all the
hacks just causes a lot of problems in maintaining a working system.

-- Scott


--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net


More information about the users mailing list