OIDC dynamic registration policy ID

[Wessel, Keith]

Works for me. You've given me enough to run with here. Thanks for that.

I'll submit a feature request when I get a chance to make the defaultMetadataPolicyLocation a simple property on the profile rather than needing to override a bean or build a map of claims and corresponding rules since it would be a whole lot simpler.

It also seems like there should just be a bean somewhere in the code that maps policy IDs to metadata policy location filenames for ease and simplicity of the deployer. But I realize that this probably isn't the easiest for the developer to implement, and I also recognize that this was the first go at implementing metadata policies. I'm thrilled to at least have this functionality in the IdP.

Keith


-----Original Message-----
From: Cantor, Scott <cantor.2 at osu.edu> 
Sent: Wednesday, July 20, 2022 2:49 PM
To: Shib Users <users at shibboleth.net>
Cc: Wessel, Keith <kwessel at illinois.edu>
Subject: Re: OIDC dynamic registration policy ID

(Which is all to say that I suspect building a function by hand that uses a map of a map of claims to MetadataPolicy objects "works" but may not be at all trivial to do in the configuration, thus the assumption that overrides can be used to handle that use case, despite the problems they cause.)

-- Scott