UTF8 in asserted attribute values
Andrew Morgan
morgan at orst.edu
Wed Apr 2 13:59:19 EDT 2014
On Wed, 2 Apr 2014, Peter Schober wrote:
> * Andrew Morgan <morgan at orst.edu> [2014-04-02 00:51]:
>> I am releasing "cn" to Google as part of a release-to-anyone filter
>> policy.
>
> If you're saying that this SP doesn't actually need the cn attribute
> you could add a DenyValueRule for this SP to your attribute-filter.xml
> to work around this issue (and also minimize data exposure to the SP).
> -peter
None of Google's documentation says I need to release these attributes to
them, so I certainly could stop doing that.
Do most folks specify the attributes to release for each SP? Can I
create a filter to release some common attributes to all InCommon members?
I'm just trying to get a sense of what's the most practical approach to
this. We haven't published our IDP metadata to InCommon yet, so I'd like
to make some sensible choices before we get too far along.
Thanks,
Andy
More information about the users
mailing list