SAML1.1 attribute release on Shib 3

[Cantor, Scott]

On 2/15/17, 12:49 PM, "users on behalf of Morris, Andi" <users-bounces at shibboleth.net on behalf of amorris at cardiffmet.ac.uk> wrote:

> We're not intending to push any personally identifiable information via this method, just the targetedID and the scoped
> affiliation attributes. Is this still risky?

A targeted ID is a personally sensitive piece of information, it's entire reason for existing is to provide a way to identify somebody in a way that isn't easily associated to somebody without other data. Pushing them around in the clear in ways they can be linked back to people is really making them useless. Just don't bother and push over a fixed identifier that's much simpler to deal with.

> Should I pull the attribute query out of the metadata if I'm pushing the attributes? If I push, does this still go through the
> backchannel connection?

Pushing attributes is something you do to get rid of the back channel or to accomodate a system that doesn't support it. If you're getting rid of the back channel, then you alter your configuration to reflect that, and you publish updated metadata once it's no longer supported and in use and before completely disabling it.

-- Scott