IdP attribute filter strategy

[Tom Scavo]

On Fri, Jun 5, 2015 at 12:55 PM, Jeffrey Crawford <jeffreyc at ucsc.edu> wrote:
>
> One thing I noticed, I think, is that metadata that already contains
> something like:
>     <mdattr:EntityAttributes
> xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">
>       <saml:Attribute Name="urn:mace:ucsc.edu:metadata:attr:profile"
> NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
>
> and you then make a rule in the metadata filter like:
>         <MetadataFilter xsi:type="EntityAttributes">
>             <saml:Attribute Name="urn:mace:ucsc.edu:metadata:attr:profile">
>
> The filter will not augment existing AttributeValues in the metadata.

Jeffrey, thanks for reporting this. I would call that a bug. Would you
mind creating an issue in the issue tracker so this doesn't fall
through the cracks?

Tom