UTF8 in asserted attribute values

Andrew Morgan morgan at orst.edu
Wed Apr 2 13:59:19 EDT 2014

On Wed, 2 Apr 2014, Peter Schober wrote:

> * Andrew Morgan <morgan at orst.edu> [2014-04-02 00:51]:
>> I am releasing "cn" to Google as part of a release-to-anyone filter
>> policy.
> If you're saying that this SP doesn't actually need the cn attribute
> you could add a DenyValueRule for this SP to your attribute-filter.xml
> to work around this issue (and also minimize data exposure to the SP).
> -peter

None of Google's documentation says I need to release these attributes to 
them, so I certainly could stop doing that.

Do most folks specify the attributes to release for each SP?  Can I
create a filter to release some common attributes to all InCommon members? 
I'm just trying to get a sense of what's the most practical approach to 
this.  We haven't published our IDP metadata to InCommon yet, so I'd like 
to make some sensible choices before we get too far along.


More information about the users mailing list