Metadata-Based Naming?

[Scott Cantor]

> On Jul 2, 2026, at 7:30 PM, Wil Cooley via users <users at shibboleth.net> wrote:

> From what I understand, I need to:
> 1. Disable the appropriate AttributeDefinition in "conf/attribute-resolver.xml" for the attribute I've given id="slack_last_name" (saml2 name="last_name").

You can't disable the AttributeDefinition itself, nothing should be suggesting that...you might or might not need it if you're exporing "sn" from a data connector, but that would be true with or without this feature.

> 8. Run "aacli --saml2 -n wcooley -r https://slack.com" and see an attribute Name="last_name" (and presumably, no attribute Name="sn").

Not actually the case. The default naming rules aren't conditional (by default anyway). The metadata tagging allows additional naming rules to be added, but it doesn't suppress the standard ones. There can't be more than a tiny number of SPs so broken as to care, and I think I ran into maybe 1 in 25 years.

> Do you see the error in the snippet of XML I included above?

Not offhand, but of course all (namespaced) XML is impossible to just cut and paste.

> How the heck did XML validation let this pass? "xmllint" makes no complaint about it.

I doubt xmllint is even namespace aware, but I don't know offhand. It may require a special flag for that.

-- Scott