Requested Attributes on IdPv3

[Simon Gfeller]

Hi,

I try to configure an IdP 3.2 so, that the IdPs Attribute Resolver tries to
resolve only the requested attributes from the relying party and NOT all
attributes from the attribute definitions like now. I'd like to define the
requested attributes in the SP Metadata.

The way I've already tried ist is with SP Metadatas like the following
example:
            <AttributeConsumingService index="1">
                <ServiceName xml:lang="en">....</ServiceName>
                <ServiceDescription xml:lang="en">....</ServiceDescription>
                <RequestedAttribute
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"
                    Name="urn:oid:2.5.4.42" FriendlyName="givenName"
Required="true" />
            </AttributeConsumingService>

But if I look into the logfiles of the IdP, I see that the Attribute
Resolver always resolves all AttributeDefiitions from its config and not
only the requested "givenName" atribute from the example above.

Is this with the metadata not the common way? Are there some special
configurations on the IdP required?

Regards,
Simon
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160106/50238be8/attachment.html>