OIDC extension - "Unable to produce a viable 'sub' claim" error

[Cantor, Scott]

> Also, what is the right way to contribute now that development switched to
> Shibboleth project?
> I was unable to find any guide on how to contribute except Contribution Policy
> [2] but that does not say where to send patches.

issues.shibboleth.net

The registry should be properly enabled out of the box. Long term, it's not going to work like it does now, it shouldn't be based on something like the name of an attribute being "sub". But for the moment, I don't think it's any different than before, and you can freely use an AttributeEncoder as before or add a rule to the registry, either should work (the encoder just turns into a rule internally). I don't know what it does or did out of the box.

The example in the wiki still looks usable to me. The exception would be if the name of the attribute resolver configuration isn't the default file, there's an edge case there.

-- Scott