Attribute Definition activation condition

[Jonathan Johnson]

I have an attribute that is only interesting after authentication for selecting further authentication flows, noted with `idp.authn.resolveAttribute`. In working through an activation condition, I’ve noticed that no matter what I set, the activation condition doesn’t seem to respected (e.g., I’d set it to one that always returns false, and the attribute would still be resolved). I’ve found a way around this for the short term by controlling the Data Connector, though this seems like it might be overkill and might cause problems later on.

Is this expected behavior?

Relatedly, is there an inbuilt way to configure an attribute to only be resolved during/before authentication and not during attribute resolution?

Thanks


-Jj
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160229/ea1d4ddf/attachment.html>