saml-nameid.xml activation condition based on NameID format?

Cantor, Scott cantor.2 at osu.edu
Fri Sep 11 18:09:07 UTC 2020


On 9/11/20, 1:52 PM, "users on behalf of Paul B. Henson" <users-bounces at shibboleth.net on behalf of henson at cpp.edu> wrote:

>    So in general you recommend against activation conditions on name ID generators?

Generally. The only particular reason for them is to define generators that need to be specific to an SP to violate the standard with an inappropriate value for a format, or just generally the use case of having multiple generators for a given format.

>    The goofy attributes would only be released for the services that wanted the email but not email nameid, and then 
> everything else would get the standard mail.

That is probably a more concise way to do what I'm talking about above, but I'm just saying even if you want to do it, all you should really need is a condition based on entity tag or entityID, nothing that needs to look at formats in metadata.

-- Scott




More information about the users mailing list