Request information about AttributeQuery usage and OIDC support

[Stev Leibelt]

Hello,

we are trying to evaluate a generic way to deprovision users by using
Shibboleth. My primary source of information is "User Deprovisionierung
via Attribute Query" [0].

I am writing an email to this list to get answers to the following
questions:

1.) Is this documentation [0] still valid for Shibboleth IdP 5.0 [2]?
2.) Can I use AttributeQuery also for OIDC [3] Service Providers?
Expectation is "No", based on [4] nad [5]
3.) What is the speed per request and the general load when using
AttributeQuery? As far as I know, 
4.) If 2.) is true, had someone already used the resolvertest also
support oidc? Expectation is "No", based on [6]
5.) If 2.) is false, are equal ways to fetch a user status when using
OIDC?
6.) Is there any information whether and how the OIDC support will be
improved in Shibboleth?

Thank you in advance for any feedback.

[0]
https://doku.tid.dfn.de/de:shibidp:config-deprovisionierung

[1]
https://openid.net/

[2]
https://shibboleth.atlassian.net/wiki/spaces/IDP5/pages/3199501794/AttributeFilterConfiguration

[3]
https://shibboleth.atlassian.net/wiki/spaces/IDPPLUGINS/overview

[4]
https://shibboleth.atlassian.net/wiki/spaces/SP3/pages/2065334466/QueryAttributeResolver

[5]
https://shibboleth.atlassian.net/wiki/spaces/IDP5/pages/3199511404/AACLI

[6]
https://shibboleth.atlassian.net/wiki/spaces/SP3/pages/2065334902/resolvertest

-- 
Mit einem herzlichen Glück Auf,
Stev Leibelt
 

TU Bergakademie Freiberg
Abteilung Kommunikation | IDM Softwareentwicklung
Bernhard-von-Cotta-Str. 1 Raum 3.04
Tel: 03731-392 658