SubjectDerivedAttributeDefinition Generated no values

Cantor, Scott cantor.2 at osu.edu
Tue Oct 13 16:08:43 UTC 2020


On 10/13/20, 11:49 AM, "users on behalf of Wessel, Keith" <users-bounces at shibboleth.net on behalf of kwessel at illinois.edu> wrote:

>    And would I be better off just using a subjectDataConnector?

Yes. You can't define a SubjectDerivedAttributeDefinition based on an attrbute definition resolved during normal attribute processing, that hasn't happened yet. You'd have to use a SubjectDataConnector to build the substrate for a SimpleAttributeDefinition, which is pointless because you can just export the attribute from the data connector.

I'm going to add a new c14n flow in 4.1 that just declaratively pulls something out of the SAML results to use instead of the mess of going through the resolver.

-- Scott




More information about the users mailing list