Attribute query with qualified principal name

Eric Goodman Eric.Goodman at ucop.edu
Mon Feb 23 16:36:09 EST 2015


>If you want to support standalone queries using a user identifier, you can, 
>but there's no V2 support for limiting that to a specific requester. Once it's 
>possible to do, any SP can issue a query like that and get back data that 
>happens to be in the release policy for that requester.

Is the implication here that in V3 there is support for limiting this to specific requesters? 

At this point

	https://wiki.shibboleth.net/confluence/display/IDP30/6.6+SAML+2+Attribute+Query

is a little bit sparse on details :), but for now I'm just curious if there actually are enhanced features in this area in v3. 

--- Eric


More information about the users mailing list