custom nameid formats and metadata-driven config

[Les LaCroix]

On Fri, Aug 5, 2022 at 8:27 AM Cantor, Scott via users <users at shibboleth.net>
wrote:


> But the "full" fix is simply to undo the bad idea... All I can really do
> is add a warning somewhere mentioning that pretty much by definition you
> don't want many settings attached to the default profiles.
>
> -- Scott


I can suggest two places to consider putting the warning about the bad
idea, and maybe a brief explanation of why it's bad.

1. In the example "Changing Profile Defaults" in
https://shibboleth.atlassian.net/wiki/spaces/IDP4/pages/1265631678/RelyingPartyConfiguration
.  The example seems to be a slightly different way of doing exactly what
we did, albeit with a different precedence list.  (Granted, I might be
misunderstanding, which is a common theme in this thread.)  The description
of the example almost makes it sound like it's a good idea, not a bad one.

2. In the distributed version of relying-party.xml, in the comments right
before the default relying party bean.

-Les

<http://www.carleton.edu/>

*Les LaCroix '79*

Strategic Technologist

Information Technology Services

t: (507) 222-5455

>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20220806/350a8241/attachment.htm>