Limited attribute resolution per entityID

[Lazar, Michael E]

Hello group,

Maybe this question has a reason that I'm unaware of so I come with my propeller hat on, but is there a compelling reason why all attributes are resolved for a SP when their attribute release may only have a couple?

I've noticed throughout our use of the IdP that even if a service provider only has two or three attributes released to it that the IdP will resolve all of a user's attributes. I know in the attribute resolver config there is an InputAttributeDefinition ref tag to acquire dependent attributes, just wonder if resolving a more limited set of attributes is something on the table for version 5, or if there is a compelling reason all attributes are being resolved that I may be missing. It seems there could be significant performance improvement if only those attributes that are actually needed get resolved; and I understand that makes the coding of the resolver a bit more complex. I honestly haven't been in the code deep enough to make any more-educated suggestions, hence the propeller hat.

Hope everyone is having a good week, and thank you for your efforts!
-Michael.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20230810/f6f5109e/attachment.htm>