Question about available attributes

[Kevin Foote]

On Jun 11, 2014, at 9:20 AM, Ken Weiss <ken.weiss at ucop.edu> wrote:

> Is there a set of attributes that every single Shibboleth IDP is required to release to every configured SP? At the very least, will a successful authentication result in the EPPN being returned to the SP?

No such set. An IdP is free to send all, some or none of the attributes it obtains for the principal it has authenticated.
You can plan on getting a statement back I guess.

> I know that for Research and Scholarship IDPs I should be able to count on EPPN, displayName (or equivalent), and mail, but what about non-R&S IDPs? What can I absolutely rely on obtaining from any IDP that allows my SP to interact with it?

See above.. R&S IdPs are saying that they will provide these attributes to R&S services not others.

--------
thanks
 kevin.foote