Principal Adding

[Klingenstein, Nate]

All,

Reading:

https://wiki.shibboleth.net/confluence/display/IDP30/Authentication#Authentication-UseofPrincipals

I can't figure out what "addDefaultPrincipals" on validate action beans does.  I tried setting it forcibly to false for the password flow validator for LDAP, which I assumed would result in wonky login failures because the Principal wouldn't get added, but it seems to be working as unintended.

What's the point of Principals on validators, and why would you declare it there rather than in the flows?  Recycling?  The only good way to pass things in to the class?

Thanks,
Nate.