Research and Scholarship and filter by relying party

[Cantor, Scott]

On 3/4/14, 4:30 PM, "Tom Scavo" <trscavo at gmail.com> wrote:
>
>But even so, one could always assert Transient or Persistent NameIDs,
>right? Or am I missing something?

Sure, but any SP that falls over with no NameID is still falling over on
that. The issue is not handling insufficient data, of whatever variety.

I'm not arguing applications aren't broken, I'm just not prepared to own
the responsibility for it.

But some organizations just don't have management willing to accept a user
ending up at such a service.

>>I don't see any reason why filtering isn't exactly the solution. You
>>don't
>> even need to write Java code, you could build a cron job to pull in
>> metadata and run it through an XSLT script.
>
>You mean like the script attached to this page:
>
>https://spaces.internet2.edu/x/BoOVAQ
>
>(Scott wrote this script, btw :)

Well, that script will generate a filter policy, I'm saying filter the
metadata up front. That would be a different script.

-- Scott