SP rule for limiting the number of attribute values

[Cantor, Scott]

When you filter, that's going to say "don't accept this if it has > 1 value", not "only present me a single value". Thus, you get no values.

There isn't any way to do the latter, at least nothing immediately comes to mind. I don't think any of the SP transforming features really would do that, they tend to operate on each value.

It isn't really clear how that could work since the SP would have no way to know which of the multiple values to use. You would in fact have to be able to apply the rule at the value level and tell it to reject certain values. It can't just reject "the second", as they're unordered in SAML.

-- Scott