Ex: Re: saml-nameid.xml activation condition based on NameID format?

[Paul B. Henson]

> From: Cantor, Scott
> Sent: Friday, September 11, 2020 5:39 AM
> 
> You really shouldn't try to "game" this part of the system. The metadata and/or
> request are already automatically used, you don't need to include them in a
> condition. The best way to control them ultimately as a last line of control is
> through attribute release.

So in general you recommend against activation conditions on name ID generators?

I guess I could do something like:

p:attributeSourceIds="#{ {'concurLogonID', 'otherStupidNotEmailID', 'mail'} }"

The goofy attributes would only be released for the services that wanted the email but not email nameid, and then everything else would get the standard mail.

Thanks...