Centralized Shibboleth EDS with custom attributes

[Cantor, Scott]

On 9/29/16, 10:12 AM, "users on behalf of Cochran, Matthew D (GE Digital)" <users-bounces at shibboleth.net on behalf of matthew.D.cochran at ge.com> wrote:

>*   Based on user input, EDS responds back to SP with an an attribute (corresponding to a
> policy on the IDP)
>      *   SP makes authnRequest to identity provider including the attribute

If by "attribute" you mean a SAML extension, the only way to do that with the SP is to generate your own SAML requests or to pass one in with the 2.6 feature for passing in an AuthnRequest to cause the SP to reissue it for you in the right encoding. Either way your code has to do all this and the EDS is not involved in any way.

-- Scott