SAML1

[Cantor, Scott]

On 3/16/15, 1:43 PM, "Rod Widdowson" <rdw at steadingsoftware.com> wrote:

>> > OK, the query failed with "Connection refused" but why does the IDP
>> > then log the number of attributes below? Seems those have successfully
>> > been pushed over the browser, i.e., the SP should have these available:
>> 
>> Good point (as always) Peter.  I'd need to look where exactly in the flow
>> that log message gets emitted.
>
>Scott would need to confirm, but AFAICS it looks as though the attribute are
>prepared in the basic SAML1 flow regardless of whether they will be pushed
>or not.  I'm pretty sure that this is what V2 did too.  The decision on
>whether to push them via the browser, or put them into an artefact or
>nothing seems to come at another level.

I beleive that's true. I couldn't really say what the audit log looked like before if the attributes aren't pushed. V2 resolved them, certainly, but I don't know if it logged them. My assumption was that it did.

-- Scott