Custom nameid getting released in version 2 but not version 3

Rod Widdowson rdw at steadingsoftware.com
Thu Aug 4 04:43:07 EDT 2016


> There are policy requirement rules and matchers (the things that are
> meant to run against the values of an attribute being filtered). Some
> things make sense in one place and some things make sense in another.
> Using them where they don't make sense will produce results that don't
> make sense.

And specifically, in V3 you can absolutely know what sort of non-sense they
will do:

https://wiki.shibboleth.net/confluence/display/IDP30/AttributeFilterConfigur
ation#AttributeFilterConfiguration-Semantics

(if they don't do what you expect then that’s a bug)

In V2 it was pretty ad-hoc so we (on purpose) made no attempt to follow
those sematics and concentrated on consistency.

R



More information about the users mailing list