> is there a way in the shibboleth IDP to allow as a webservice, the > request of attributes without using the SSO part of the process ? Yes, SAML attribute query has always been supported. > Is that the Service to request ? how ? Read the SAML standard, basically. It's fairly vanilla SOAP. -- Scott