Ex: Re: lots of EntityAttributes MetadataFilters needed?
Paul B. Henson
henson at cpp.edu
Fri Sep 11 17:48:44 UTC 2020
> From: Cantor, Scott
> Sent: Friday, September 11, 2020 5:28 AM
>
> No, but that really depends on your rules.
>
> I roughly have one per "policy" or collection of attributes.
I considered bundling together similar attributes, like all of the name attributes (givenName, mi, sn, displayName, cn, etc) and releasing them together even if the underlying service only wanted one or a couple. Other than slightly increasing the size of the assertion, there is no issue with that in practice? Given some of the horribly broken service providers I've dealt with I wouldn't be surprised if one of them puked if it saw attributes it didn't know what to do with 8-/.
Thanks...
More information about the users
mailing list