modularize attribute bundles in an AttributeFilterPolicy?

[Nate Klingenstein]

> Ok, thanks. I mainly wanted to make sure I wasn't missing an opportunity
> to factor this out and perhaps simplify the configs. I think it would be
> useful, for all the usual reasons you might want to factor something like
> that out, but understand if it's not cards for the foreseeable future.

It’s at least partially my fault that it ended up in v2.  I still really like the concept, but in practice, some federations issued complete attribute release filter policies and some released nothing.  Nobody released parcels or templates like I had anticipated.

Since then, I feel like the same need has been somewhat met by expanding (SAML) metadata with things like entity categories.  All of that ties attribute release much more tightly to metadata, which is probably good in the end.

Your use case is an example of the relatively common needs that I think hit just enough edge cases to find the crack in the sidewalk.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160226/89d50175/attachment-0001.html>