Shibboleth Developers

[Ian Young <>]

Chad La Joie wrote:

> By default, the Shibboleth 2.0 IdP pushes attributes.  It can be
> configured to not do this on a per relying party (or relying party
> group) basis.

Tangential question: do you actually mean what you say here, or do you
mean that the Shibboleth 2.0 IdP pushes attributes *if the SP can be
sent attributes in an encrypted form* ?

I'd be a little concerned by a default configuration that sent
unencrypted attributes through the front channel.

        -- Ian