<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
line-height:110%;
font-size:11.5pt;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 70.85pt 2.0cm 70.85pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="DE-AT" link="#00587A" vlink="#009C9B" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal">Hi,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span lang="EN-US">our setup doesn’t require any meaningful attribute filtering, we simply want to release all attributes provided by our DataConnector we have attribute transcoding rules for, so our attribute filtering configuration currently
is just a condition-less list of all attributes our system knows.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Therefore we would like to disable attribute filtering completely, to avoid maintaining the attributes in 2 separate places in the IdP (attribute filtering and attribute transcoding configuration).<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Is there any reason this is a bad idea respectively the IdP doesn’t provide a way (at least I didn’t find any) to replace or disable the default AttributeFilterService or AttributeFilterServiceStrategy?<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">The only way I could imagine would be to prefill AttributeFilterContext#filteredAttributes with all attributes, but this sounds like an awful hack and bad idea…<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Thanks in advance & best regards,<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Mathias</span><i><span lang="EN-US" style="font-size:9.0pt;line-height:110%;mso-fareast-language:DE-AT">
</span></i><i><span style="font-size:9.0pt;line-height:110%;mso-fareast-language:DE-AT"><o:p></o:p></span></i></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>