Shibboleth Developers

[Ian Young <>]

Chad La Joie wrote:

> but worry that people might abuse such a function and 
> try to place attributes common to an institution's user-base in here, 
> because it would be "easier".

That's a legitimate concern, although I suppose "abuse" really equates 
to "really bad design decision" here and we might give federation 
managers the benefit of the doubt there.

I tried to address the specific issue you're raising by suggesting that 
attributes supplied through metadata would be distinguished from those 
passed through the normal channels... so, people wouldn't be tempted to 
use the metadata-based ones as a way of bypassing the normal system, 
only as a strict augmentation of it.

        -- Ian