Configuring your shib IdP to release attributes to all InCommon members

Tom Scavo trscavo at gmail.com
Mon Jan 8 15:51:34 EST 2018


On Mon, Jan 8, 2018 at 3:40 PM, Karla Borecky <kborecky at smith.edu> wrote:
>
> I assume this describes the set of basic attributes to be released?
>
> https://spaces.internet2.edu/display/InCFederation/Default+Attribute+Release

I wrote that page but it is a bit out-of-date now. In any case, I
don't work for InCommon any longer so I can't say what the party-line
is these days.

I do know this, if you hope to transition to OpenID Connect at some
point, or provide support for OIDC relying parties, you should know
that the OIDC protocol mandates the release of a long-lived,
non-reassigned identifier for every transaction. So you can "pay me
now or pay me later" as the saying goes :-)

Tom


More information about the users mailing list