SAML1.1 attribute release on Shib 3

[Cantor, Scott]

On 2/15/17, 12:32 PM, "users on behalf of Morris, Andi" <users-bounces at shibboleth.net on behalf of amorris at cardiffmet.ac.uk> wrote:

> Thanks everyone! Rod nailed it with the attribute push. Adding the following line to my default relyingparty.xml file has
> released the attributes over SAML1.1.

Well, you don't do this *and* support queries, and you really need to decide if you want to do that if you're pushing private data. Pair-wise IDs are meant to be private data. I would not personally be very comfortable doing that.

-- Scott