Question about available attributes

[Ken Weiss]

Is there a set of attributes that every single Shibboleth IDP is required to release to every configured SP? At the very least, will a successful authentication result in the EPPN being returned to the SP?

I know that for Research and Scholarship IDPs I should be able to count on EPPN, displayName (or equivalent), and mail, but what about non-R&S IDPs? What can I absolutely rely on obtaining from any IDP that allows my SP to interact with it?

https://spaces.internet2.edu/display/InCFederation/Identity+Providers+that+Support+R+and+S#IdentityProvidersthatSupportRandS-minsubset


--Ken
------------------------------------------------------------
Ken Weiss                                 ken.weiss at ucop.edu<mailto:ken.weiss at ucop.edu>
UC Office of the President              510-587-6311 (office)
California Digital Library              916-905-6933 (mobile)
UC Curation Center
415 20th Street, 4th Floor
Oakland, CA 94612

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20140611/e631baa2/attachment.html