Can the MDA add entity attributes?

[Ian Young]

> On 11 Sep 2024, at 22:08, Wessel, Keith via users <users at shibboleth.net> wrote:
> 
> I added the xslTransform bean right after my disassemble, but that didn't do it. So, I added it just before my signMetadata stage. I actually converted my signMetadata stage to a simple pipeline that transforms and then signs. So, the transform happens all in one call, and I didn't have to go adding the transform stage to various pieces of the config. That did the trick. For the sake of the list archives, I recommend doing the transform as close to before the signing as possible.

That's interesting. The work I did figuring this out implied that the issue was being introduced during the disassembly stage, so logically any time after that would have been sufficient. Your result seems to imply that there's some other part of the framework that also potentially introduces the mismatch.

That actually makes me feel better about the way I addressed this for 1.0.0, as it's as part of the signing stage and should therefore cover all possible cases.

Cheers,

    -- Ian




-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20240912/8064725c/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4151 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/users/attachments/20240912/8064725c/attachment.p7s>