Ex: Re: lots of EntityAttributes MetadataFilters needed?

Paul B. Henson henson at cpp.edu
Fri Sep 11 17:48:44 UTC 2020


> From: Cantor, Scott
> Sent: Friday, September 11, 2020 5:28 AM
> 
> No, but that really depends on your rules.
> 
> I roughly have one per "policy" or collection of attributes.

I considered bundling together similar attributes, like all of the name attributes (givenName, mi, sn, displayName, cn, etc) and releasing them together even if the underlying service only wanted one or a couple. Other than slightly increasing the size of the assertion, there is no issue with that in practice? Given some of the horribly broken service providers I've dealt with I wouldn't be surprised if one of them puked if it saw attributes it didn't know what to do with 8-/.

Thanks...


More information about the users mailing list