Regarding Okta Shibboleth Integration Generates SAML Assertion with Data Manipulation

[Cantor, Scott]

> If Okta is delivering multiple values on a single attribute
> label, it is not surprising to me that you are getting
> unexpected results.

Indeed, the brackets are coming from them, so it's nothing we're doing, you're feeding in a String and we're treating it as one, that's all expected. I would only be concerned if we ever invoked toString accidentally, as that isn't something we should be doing other than for logging.

If you get a String and it needs to be torn apart to be usable, a) that's a bug upstream as Steven said, but b) you are free to do that and there are ample tools in the resolver for doing so, all documented.

-- Scott