Exporting SP attribute policy decisions to the application

[Scott Cantor]

> But maybe there are other solutions ?

Some of those options won't even exist in V4, e.g. assertion access isn't happening in general.

Given that the filtering will be handled by the Hub/IdP, it perhaps is a possibility to look at using logback features to make use of the log information there since that's far more flexible. Still sort of asynchronous from any kind of testing though, so still not great.

We don't have any easy way to "track" and surface errors in filtering out of the filtering service. I have some tentative ideas in the remoting for being able to propagate lists of issues across the boundary for Agent error handling, but there's nothing really providing the information at the moment, so it's theoretical.


-- Scott