SubjectDerivedAttributeDefinition Generated no values

[Cantor, Scott]

On 10/13/20, 1:34 PM, "users on behalf of Wessel, Keith" <users-bounces at shibboleth.net on behalf of kwessel at illinois.edu> wrote:

>    Thanks, Steve. It is, in fact, the attribute filter piece that was needed. I'll try and add that to the instructions on the
> wiki if the editor will cooperate for me.

It's already there, with an example. It's possible examples that are default-collapsed don't register with a screen reader, that might be an issue.

> Scott, if I understand correctly, the attribute filter config piece is needed regardless of if I used a subject derived
> attribute definition or a subject data connector, is that correct?

It's the same as the SP. It doesn't accept any attributes unless you tell it to.

> So, the only advantage to the data connector route is it would let me bulk map attributes coming in from the proxy?

Yes. About the only use case for SubjectDerivedAttribute now is really just this one use case when there's only one attribute used. Otherwise it's about the same as Simple, no longer of much use.

-- Scott