Multiple Attributes Released that can be encoded as NameID's in IdP v2.4.3

[Cantor, Scott]

On 10/27/15, 3:38 PM, "users on behalf of IAM David Bantz" <users-bounces at shibboleth.net on behalf of dabantz at alaska.edu> wrote:


>
>In my (I think typical) case, there are multiple attributes with the "right" nameIDFormat or nameFormat.

Then one or more of the SPs have forced you to break your system. By definition a given Format is not meant to refer to different data just based on who's asking. That's the entire point of a Format.

>how could force the selection of ID# ? Is it sufficient to have a restrictive attribute release policy?

In V2, yes. And a constant stream of bug reports to the SP.

-- Scott