Custom nameid getting released in version 2 but not version 3
Rod Widdowson
rdw at steadingsoftware.com
Thu Aug 4 04:43:07 EDT 2016
> There are policy requirement rules and matchers (the things that are
> meant to run against the values of an attribute being filtered). Some
> things make sense in one place and some things make sense in another.
> Using them where they don't make sense will produce results that don't
> make sense.
And specifically, in V3 you can absolutely know what sort of non-sense they
will do:
https://wiki.shibboleth.net/confluence/display/IDP30/AttributeFilterConfigur
ation#AttributeFilterConfiguration-Semantics
(if they don't do what you expect then that’s a bug)
In V2 it was pretty ad-hoc so we (on purpose) made no attempt to follow
those sematics and concentrated on consistency.
R
More information about the users
mailing list