<div dir="ltr"><div dir="ltr"><div dir="ltr"><div class="gmail_default" style="font-family:"trebuchet ms",sans-serif"><div><span style="background-color:rgba(0,0,0,0)">They are claiming this is the standard way the metadata is being sent from Oracle. I don't know how assertions are set up in Oracle to know to tell them what, if anything, to change. Anyone familiar with an Oracle IdP?</span><br></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Mon, Feb 15, 2021 at 3:23 PM Peter Schober <<a href="mailto:peter.schober@univie.ac.at">peter.schober@univie.ac.at</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">* Phillip Grandsard <<a href="mailto:pgrandsard@pagepath.com" target="_blank">pgrandsard@pagepath.com</a>> [2021-02-15 20:38]:<br>
> Our IdP's typically use mace, oasis, or oid attribute namespaces but some<br>
> want to send undecorated such as:<br>
> <br>
>             <saml:Attribute Name="mail"<br>
> <br>
> NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"><br>
>                 <saml:AttributeValue xmlns:xs="<br>
> <a href="http://www.w3.org/2001/XMLSchema" rel="noreferrer" target="_blank">http://www.w3.org/2001/XMLSchema</a>"<br>
>                                      xsi:type="xs:string"><br>
> <a href="mailto:foo@bar.com" target="_blank">foo@bar.com</a></saml:AttributeValue><br>
>             </saml:Attribute><br>
> <br>
> is this acceptable?<br>
<br>
It's a bad idea. (It doesn't scale. Consider everyobody making up<br>
their own name for the same data, e.g. "name", "Name", "full_name",<br>
"fullName", "FullName", etc. and worse, even attach slightly<br>
different, possibly mutually exclusive, ad-hoc semantic or syntactical<br>
requirements on that data).<br>
With the "basic" name format it's spec-legal, though.<br>
<br>
So depending on what you mean with "acceptable" it either is (spec<br>
legal) or isn't (a good idea).<br>
<br>
-peter<br>
<br>
<br>
-- <br>
For Consortium Member technical support, see <a href="https://wiki.shibboleth.net/confluence/x/coFAAg" rel="noreferrer" target="_blank">https://wiki.shibboleth.net/confluence/x/coFAAg</a><br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" target="_blank">users-unsubscribe@shibboleth.net</a><br>
</blockquote></div><br clear="all"><div><br></div>-- <br><div dir="ltr" class="gmail_signature"><table style="border-style:none;padding:0px;margin:50px 0px"><tbody><tr><td style="vertical-align:middle;padding:0px 7px 0px 0px"><span style="font-family:verdana,geneva,sans-serif"><img height="75" src="https://storage.googleapis.com/signaturesatori/customer-C02avmybv/images/companyLogo/1qmsh.png" width="138"></span></td><td style="border-left:3px solid rgb(232,232,232);padding:7px 0px 0px 10px">
                        <div style="font-size:14px;line-height:14px;color:rgb(0,224,194);margin-bottom:10px">
                        <div style="line-height:14px;margin-bottom:10px"><span style="font-family:verdana,geneva,sans-serif"><span style="font-size:13px"><span style="color:rgb(0,128,128)"><span style="font-weight:bold">Phil Grandsard<span style="font-size:12px"> </span></span></span></span><span style="font-size:12px"><span style="font-weight:bold"><span style="color:rgb(211,211,211)">|</span><span style="color:rgb(0,128,128)"> </span></span><span style="color:rgb(0,0,0)">Senior Software Engineer</span></span></span></div>

                        <div style="font-size:12px;line-height:12px;color:rgb(0,0,0);margin-bottom:10px"><span style="font-family:verdana,geneva,sans-serif"><span style="color:rgb(0,128,128)"><a href="mailto:phil.grandsard@printreach.com" target="_blank">phil.grandsard@printreach.com</a></span></span><span style="font-family:verdana,geneva,sans-serif"> </span><span style="font-family:verdana,geneva,sans-serif;color:rgb(191,191,191)">|</span><span style="font-family:verdana,geneva,sans-serif"><span style="color:rgb(0,128,128)"> 1-630-332-0378</span></span></div>

                        <div style="font-size:12px;line-height:12px;color:rgb(0,0,0)"><span style="font-family:verdana,geneva,sans-serif">Print Reach Software, LLC </span><span style="font-family:verdana,geneva,sans-serif;color:rgb(191,191,191)">|</span><span style="font-family:verdana,geneva,sans-serif"><span style="color:rgb(0,128,128)"> <a href="http://www.printreach.com" target="_blank">www.printreach.com</a></span></span></div>
                        </div>
                        </td></tr><tr><td colspan="2" style="vertical-align:bottom"> </td></tr></tbody></table></div></div></div></div></div>