Random sourceAttributeID Question

Rod Widdowson rdw at steadingsoftware.com
Thu Oct 6 04:28:16 EDT 2016


> Why is sourceAttributeID declared in the AttributeDefinition rather than in the dependencies themselves?  Wouldn't it make more
> sense the other way around?

It’s a bug in the schema https://issues.shibboleth.net/jira/browse/IDP-680

Amongst the oddnesses it also makes it easy to configure things you didn't mean to, but difficult to combine attribute values and is
downright wrong for some uses of Connectors.

FWIW, in 3.3 the need for the dc: and ad: namespaces has been dropped and only those definitions for which it makes sense have can
have sourceAttributeID, this will remove some easy foot/gun/bullet cases, but not solve the real problem.

Looking further forward, once the next releases of the IdP and SP are out I'll be looking at what can be done about this, firstly in
3.4 and then in 4.0

Rod




More information about the users mailing list