Can the MDA add entity attributes?

[Ian Young]

> On 16 Sep 2024, at 17:29, Wessel, Keith via users <users at shibboleth.net> wrote:
> 
> Seems like a logical test, Ian. I just tried it and, sure enough when I don't add any entity attributes, the transform right after the disassemble stage and signing at the end results in a valid signature.
> 
> So, sounds like you nailed this one. I'll keep my workaround of doing a transform just before signing (or any time after adding entity attributes) until the release of 1.0.0 when I can drop the explicit transform.

Thanks for taking the time to do this, I really appreciate it. Confirming my working understanding of the problem is really useful, particularly as it confirms that what we already have will address the issue across the board for 1.0.0.

Onwards and upwards,

    -- Ian




-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20240919/7606e99d/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4151 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/users/attachments/20240919/7606e99d/attachment.p7s>