<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div class="elementToProof"><span style="font-family: Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);">There are definitely cases where the SP cares about the friendlyName, unfortunately. I can't think
of any reason why a single SP would need both attributes though. Just pick the right one and release only it.</span></div>
<div class="elementToProof"><span style="font-family: Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);"><br>
</span></div>
<div class="elementToProof"><span style="font-family: Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);">Andy<br>
</span></div>
<div id="appendonsend"></div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> users <users-bounces@shibboleth.net> on behalf of Cantor, Scott via users <users@shibboleth.net><br>
<b>Sent:</b> Monday, January 23, 2023 1:01 PM<br>
<b>To:</b> Shib Users <users@shibboleth.net><br>
<b>Cc:</b> Cantor, Scott <cantor.2@osu.edu>; Rob Ansaldo <ransaldo@smith.edu><br>
<b>Subject:</b> Re: Releasing the same attribute with different friendly names?</font>
<div> </div>
</div>
<div class="BodyFragment"><font size="2"><span style="font-size:11pt;">
<div class="PlainText">[This email originated from outside of OSU. Use caution with links and attachments.]<br>
<br>
> ln my attribute-resolver, both lastname and sn come from the same LDAP<br>
> attribute and both have a name defined as "urn:oid:2.5.4.4", but have different<br>
> friendly names.<br>
<br>
That isn't supported. It's only working by accident, a bug was fixed to prevent it from creating separate SAML Attributes with the same name anyway and that isn't getting "unfixed". It should have been doing that all along.<br>
<br>
> Can anyone think of why this would be necessary? Is there a case where the SP<br>
> cares what the friendlyname is?<br>
<br>
Are there such SPs? Yes. That doesn't make it something you should tolerate, and practically speaking we made it impossible to do what you're doing, so...that's just how it is. It was fixed in 4.2.<br>
<br>
-- Scott<br>
<br>
<br>
--<br>
For Consortium Member technical support, see <a href="https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Fshibboleth.atlassian.net%2Fwiki%2Fx%2FZYEpPw&data=05%7C01%7Cmorgan%40oregonstate.edu%7C00052272468840dddd9508dafd85022f%7Cce6d05e13c5e4d6287a84c4a2713c113%7C0%7C0%7C638101044952665892%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=Ieet%2FJVkjv5OTMB9HE2qaHzn2Xp%2FkwohEZ5Ca048EU8%3D&reserved=0">
https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Fshibboleth.atlassian.net%2Fwiki%2Fx%2FZYEpPw&data=05%7C01%7Cmorgan%40oregonstate.edu%7C00052272468840dddd9508dafd85022f%7Cce6d05e13c5e4d6287a84c4a2713c113%7C0%7C0%7C638101044952665892%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=Ieet%2FJVkjv5OTMB9HE2qaHzn2Xp%2FkwohEZ5Ca048EU8%3D&reserved=0</a><br>
To unsubscribe from this list send an email to users-unsubscribe@shibboleth.net<br>
</div>
</span></font></div>
</body>
</html>