Setting AttributeConsumingIndex in IdP 4

Cantor, Scott cantor.2 at osu.edu
Wed Nov 1 16:30:21 UTC 2023


There is no practical means of doing this in 4, just some very advanced low level ways.

I would rethink your approach altogether unless you control all the IdPs because nothing but Shibboleth supports that mechanism to begin with, and there are few if any deployers of Shibboleth that would honor it. It acts as a filtering mechanism by default, but it won't cause attributes to be produced or released, and the lack of booleans in the articulation of requirements makes it largely worthless in practice.

-- Scott




More information about the users mailing list