SP Attribute Extractor multiple values when using NameID and Attribute
Peter Schober
peter.schober at univie.ac.at
Wed Apr 5 16:20:30 EDT 2017
* Peter Schober <peter.schober at univie.ac.at> [2017-04-05 22:19]:
> * Aaron Howell <aaron.howell at deakin.edu.au> [2017-04-05 21:46]:
> > Because that is the way IdPv3 works - if I am sending the NameID
> > with the recommended format - then the attribute is also released.
>
> Well, you could filter out the attribute and configure the NameID to
> go out even if the attribute it's based on isn't being released
> (IIRC).
I was thinking (in conf/saml-nameid.properties):
idp.persistentId.useUnfilteredAttributes = true
but maybe you'd want more granular control if you deal with lots of
attribute-based NameIDs for whatever reason.
-peter
More information about the users
mailing list