Dealing with Compounded Attributes

[Cantor, Scott]

On 6/24/14, 12:54 PM, "Christopher Peters" <cjpeters at uci.edu> wrote:

>We're so limited on resources dealing with Shib that convincing anyone to
>audit and strip those from our attributes now--and ensure all our SPs
>still work--seems like an a huge waste of resources.

It's not zero risk, I suppose, but I think it's low risk. You'd have to be
dealing with SPs that themselves incorrectly assigned attribute names to
handle, and were themselves not handling both. Shibboleth isn't relevant
here of course since it doesn't limit its processing based on SAML
version, so the only risk there is somebody removing defaults, or I
suppose if the code they had to *add* to de-dupe was so broken that it
breaks when it doesn't need to run.

-- Scott