IdP v3 not releasing attributes to SAML1 SPs

Mark K. Miller max at psu.edu
Mon Aug 22 13:26:21 EDT 2016


On Mon, 22 Aug 2016, Cantor, Scott wrote:

> There's absolutely no difference in SAML 1 behavior. Attributes are 
> omitted unless you tell it to push them, same as before.

Just to be sure you keep the right perspective, I'm just clueless, not 
being arguementative!  And, to prove it...  "Same as before?"  What did I 
do before to push them?

> I had, and still have, SAML 1 SPs, but I turned off queries deliberately 
> and would suggest you do the same.

So, if it's all identical, just the same, then why would you need to make 
this change?  Again, searching the wiki for "disable saml1 attribute 
queries" doesn't seem to (m)any useful results.

What does it take to deliberately turn off SAML1 queries?  Would I simply 
stop advertising an ArtifactResolutionService endpoint for a SAML1 SOAP 
binding in my metadata?  Or, is there more to it than that?  Is there some 
IdP config file that also needs changed?

> -- Scott

Thank you,

Max


More information about the users mailing list