Duplicate attributes after upgrade to Shibboleth 5

Peter Schober peter.schober at univie.ac.at
Wed Feb 5 16:32:07 UTC 2025


Equbay Kiflay via users <users at shibboleth.net> [2025-02-05 17:03 CET]:
> Thank you for the pointer. Together with other Shibboleth documentation I
> was able to resolve the issue by removing the line
>          <value>%{idp.home}/conf/attributes/default-rules.xml</value>
> from conf/services.xml

Well, if you intend to stick with the Attribute Registry I'd
personally remove any (now redundant, thanks to the registry)
DisplayName, DisplayDescription and AttributeEncoder child elements
from your AttributeDefintions.
(Of course only those already covered by rules in the registry.)
That way you actually benefit from the registry by having a
shorter/simpler resolver config.

Otherwise it's probably better to disable the Attribute Registry
completely, cf. "shibboleth.AttributeRegistryResources" in your
conf/services.xml

-peter


More information about the users mailing list