activactionCondition question

[Cantor, Scott]

On 9/22/16, 9:24 AM, "users on behalf of Greg Kuchyt" <users-bounces at shibboleth.net on behalf of gkuchyt at uvm.edu> wrote:

>    If one needs to release an attribute in a different form to a select group of SPs what
> is the intended way to accomplish this? Example: A couple SPs want uid as username at realm

If you mean provide different data to different SPs while naming it the same thing, there is no intended way, and I would never do it. If they want different data, they get a different attribute, very simple.

> Would you define the attribute twice in attribute-resolver.xml and have one
> activationCondition for the group of SPs that need the different attribute form or would
> you define two activationConditions with the second being a negation of the first which is
> attached that to the "normal" definition of the attribute?

Were I to do something that I would not in fact do, I would attach conditions to the encoders, not the attribute definitions, but it would ultimately depend on the conditions, how efficient they were to express and to run, and the overall impact on the efficiency of the operations.

-- Scott