Shibboleth Developers

["Scott Cantor" <>]

> The SAML spec says that at least one attribute statement MUST satisfy
> this requirement.  Evidently, there may be other attribute statements
> that do not strongly match the Subject in the query.  Should those
> attributes statements be discarded?  (I suppose so.)

Yeah, you're right, I forgot how messy it used to be. My brain is mostly in
2.0 mode, and just glosses over the differences. Just think what fun arguing
over RespondWith used to be.

I would have no argument with somebody that wanted to nail it down tighter
than that. The use case for returning multiple statements of the same type
never really existed, and is completely non-existent in 2.0.

I'll consider adding something about that to our profile, but I'd rather
just focus on coding 2.0 and making this all moot.

-- Scott