Attribute Filters using DefaultRelyingParty

[Cantor, Scott]

On 3/31/14, 3:13 PM, "Jeffrey Crawford" <jeffreyc at ucsc.edu> wrote:
>
>I can't imagine this would be important but our IdP has two entity ID's
>one is for non inCommon relying parties where we have the IdP's metadata
>published on a url, and the second is used
> for inCommon relying parties. We change the "provider" on RelyingParty
>entries depending on which case we are working with on a particular
>Service Provider. However I'm using the same provider entry on the
>DefaultRelyingParty as the urn:mace:incommon RelyingParty
> group id.

I can't think of a reason it would matter unless the attribute filter
mentioned anything about an AttributeIssuer rule, but that said, this is
definitely a red flag to me.

-- Scott