lots of EntityAttributes MetadataFilters needed?

Cantor, Scott cantor.2 at osu.edu
Fri Sep 11 18:06:58 UTC 2020


On 9/11/20, 1:48 PM, "users on behalf of Paul B. Henson" <users-bounces at shibboleth.net on behalf of henson at cpp.edu> wrote:

>    I considered bundling together similar attributes, like all of the name attributes (givenName, mi, sn, displayName, cn,
> etc) and releasing them together even if the underlying service only wanted one or a couple. Other than slightly
> increasing the size of the assertion, there is no issue with that in practice? Given some of the horribly broken service
> providers I've dealt with I wouldn't be surprised if one of them puked if it saw attributes it didn't know what to do with

I wasn't referring to releasing more than is strictly needed or assumed to be needed, but no, I have almost never encountered any software that ever cared about attributes it didn't know. That's about the only thing I've seen handled virtually universally.

-- Scott




More information about the users mailing list