Attribute query with qualified principal name
Eric Goodman
Eric.Goodman at ucop.edu
Mon Feb 23 16:36:09 EST 2015
>If you want to support standalone queries using a user identifier, you can,
>but there's no V2 support for limiting that to a specific requester. Once it's
>possible to do, any SP can issue a query like that and get back data that
>happens to be in the release policy for that requester.
Is the implication here that in V3 there is support for limiting this to specific requesters?
At this point
https://wiki.shibboleth.net/confluence/display/IDP30/6.6+SAML+2+Attribute+Query
is a little bit sparse on details :), but for now I'm just curious if there actually are enhanced features in this area in v3.
--- Eric
More information about the users
mailing list