Requested Attributes on IdPv3

[Cantor, Scott]

On 1/6/16, 11:00 AM, "users on behalf of Simon Gfeller" <users-bounces at shibboleth.net on behalf of simon.gfeller at gmail.com> wrote:


>
>OK, but is there another solution without metadata to determine what is to resolve?  With the AuthnRequest from the SP for example?

No.

>I think there must be a solution, because I looked into the source code of the IdPs Attribute Resolver implementation. In the AttributeResolutionContext is the following field:
>    /** (internal) Names of the attributes that have been requested to be resolved. */
>    @Nonnull @NonnullElements private Set<String> requestedAttributeNames;

That isn't set during the mainline invocation of the ResolveAttributes action bean. It's used in some other resolver use cases like the filtering of login flows or in subject canonicalication/mapping, in which a specific attribute is named in the configuration.

-- Scott