<div dir="ltr">The idea is to be metadata-driven here. Yes, the same can currently be achieved through addition of tags in attribute-resolver.xml, but then every time an SP desires a custom mapping it must be added there rather than in the SP's metadata.<div><br></div><div>Thank you,</div><div>Joshua Dachman</div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Sun, Jul 14, 2019 at 2:41 PM Ian Young <<a href="mailto:ian@iay.org.uk">ian@iay.org.uk</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div style="overflow-wrap: break-word;"><br><div><blockquote type="cite"><div>On 14 Jul 2019, at 17:52, Joshua Dachman <<a href="mailto:jdachman@gmail.com" target="_blank">jdachman@gmail.com</a>> wrote:</div><br class="gmail-m_1342024613708539099Apple-interchange-newline"><div><span style="font-family:Helvetica;font-size:13px;font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-decoration:none;float:none;display:inline">This is a situation where the IDP has control over the SP metadata so the "mess" will be kept internal.</span><br style="font-family:Helvetica;font-size:13px;font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-decoration:none"></div></blockquote><div><br></div><div>If the IdP is the driver here, it would seem like the more obvious and less indirect approach would be to put the mapping rules you require into the IdP's configuration and cut out the middle-man. It would probably be simplest to express in terms of per-entity attribute release rules, though.</div><div><br></div><div>Is there something about your use case that you haven't mentioned which means that approach can't be used?</div><div><br></div></div><div><span class="gmail-m_1342024613708539099Apple-style-span" style="border-collapse:separate;color:rgb(0,0,0);font-family:Helvetica;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;border-spacing:0px"><div style="overflow-wrap: break-word;"><span class="gmail-m_1342024613708539099Apple-style-span" style="border-collapse:separate;color:rgb(0,0,0);font-family:Helvetica;font-size:12px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;border-spacing:0px"><div>    -- Ian<br></div><div><span class="gmail-m_1342024613708539099Apple-style-span" style="font-size:medium"><br></span></div></span></div></span><br class="gmail-m_1342024613708539099Apple-interchange-newline"><br class="gmail-m_1342024613708539099Apple-interchange-newline">
</div>
<br></div>-- <br>
For Consortium Member technical support, see <a href="https://wiki.shibboleth.net/confluence/x/coFAAg" rel="noreferrer" target="_blank">https://wiki.shibboleth.net/confluence/x/coFAAg</a><br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" target="_blank">users-unsubscribe@shibboleth.net</a></blockquote></div>