attributes released to InCommon R&S category SPs

[Kevin P. Foote]

On Tue, 8 Oct 2013, Brian Gibson wrote:

> Thanks Scott, according to the audit log it looks like I am sending them
> the following...
>
> eduPersonPrincipalName
> transientId
> eduPersonScopedAffiliation
> eduPersonTargetedID.old
> eduPersonTargetedID
>
> Is there a way to see if values are being pulled from AD for the other
> fields that are not being sent (ex: sn and mail).
> I wonder if it is trying to release these attributes but it doesn't
> since it cannot pull the data from AD.

Right. I dont think IdP will release empty attributes.

You can turn up logging on your IdP and start watching idp-process.log

------
thanks
  kevin.foote