Blackboard Transact, SSO and use of attribute friendly-name

[Cantor, Scott]

On 3/13/14, 12:50 PM, "Schwoerer, Bradley J" <schwoerb at uww.edu> wrote:

>I was wondering how many people have integrated with Blackboard Transact.
> It seems straight forward, but a bit odd if I am understanding their
>documentation.   According to their documentation they are making use of
>the SAML2 attribute friendly-name.  For people that have implemented this
>product, is that truly the case.  For others, is that something that
>other apps are doing?  To me it seems wrong, but wanted to get others
>perspective.

You don't need to wonder, it's explicitly outlawed in the standard.
FriendlyName is non-normative and is for debugging or UI reasons, etc.

So yes, it's wrong.

-- Scott