Removing a value from an attribute in a script

[Cantor, Scott]

On 5/24/17, 6:28 PM, "users on behalf of Wessel, Keith" <users-bounces at shibboleth.net on behalf of kwessel at illinois.edu> wrote:

> Now that I write it out, that's kind of stupid, actually. I'll just wrap some logic around the current always-add-password-context
> part to make exceptions when I want to force MFA.

Well, even so, I wouldn't think it would be a problem to remove a value if you're inside the actual script creating that attribute. The whole mess with Nashorn had to do with how objects get returned and an issue in V2 that's long gone.

With V3, we go ahead and create the destination IdPAttribute for you but the values should be under your control and I don't think they could be unremoveable. I think it's just an issue in the logic you used, but if it doesn't matter no big deal.

-- Scott