IDP proxing for vendors non-DS/Wayf capabilities

[Nate Klingenstein]

Jehan,

> <AttributeDefinition id="canonicalName" xsi:type="SubjectDerivedAttribute"
>    forCanonicalization="true"
>    principalAttributeName="mail" />

It's been awhile and I don't have that container in front of me, but if I recall, attributes marked forCanonicalization only got released when they're the end result of canonicalization.  Make sure that's false for the other attributes.

> Nate, I'll probably come back later on (next weeks/mounth)  about the  discoveryFunctions you mention for "multi-tenant" applications, for my next shibboleth IDP integration (MS-365 ...)

We'd be glad to help, but this gets close to some of our service offerings, so we may not be able to do so on list.  Families need food...

Best wishes,
Nate.

--------
Signet, Inc.
The Art of Access ®

https://www.signet.id