Shibboleth Developers

["Scott Cantor" <>]

> I wonder if you could answer a Q for me about the IdP and the way it
> releases attributes. I think in the old days, it released whatever it
> had but I've heard reports that it releases what an SP asks for. I
> thought AttributeDesignator was used for that but long ago was told
> its use was discouraged. Are attributes released declaratively, i.e.
> via an ARP or does an SP have to specifically request attribute names
> in an attribute request?

An ARP is a filter against the set of attributes requested. If an SP doesn't
supply any, then the set is "*".

-- Scott