Default value in mapped attribute

[IAM David Bantz]

The Default value option the IdP mapped attribute definition at
https://wiki.shibboleth.net/confluence/display/SHIB2/ResolverMappedAttributeDefinition
states the Default value will be added "If a source attribute does not
match any of the value maps..." While true, it is also true the Default
value is added if a source attribute does match. In other words, the
Default value is always added, so the conditional in the text seems
misleading to me. (The example of using the Default option to add
"affiliate" for all users does hint at that behavior - that is, anyone
handled by the IdP is presumably an affiliate, even if they are entitled to
none of the other ePA values).

Assuming I've correctly described the actual behavior shall I edit the wiki
text to reflect?

Alas for my use case I need a "fall-back" - a value added only in case
nothing matches in the mapping.

David Bantz
U Alaska
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20150709/d3ad9b16/attachment.html>