Shibboleth Developers

[Alistair Young <>]

that's what I thought. Is there any reason it wouldn't release an  
attribute even if the attribute appeared as:

<Rule>
  <Target>
    <AnyTarget></AnyTarget>
  </Target>
  <Attribute name="urn:mace:dir:attribute-def:eduPersonTargetedID">
    <AnyValue release="permit"></AnyValue>
  </Attribute>
</Rule>

Alistair

--------------
mov eax,1
mov ebx,0
int 80h

On 18 Nov 2008, at 15:02, Scott Cantor wrote:

> > I wonder if you could answer a Q for me about the IdP and the way it
> > releases attributes. I think in the old days, it released whatever it
> > had but I've heard reports that it releases what an SP asks for. I
> > thought AttributeDesignator was used for that but long ago was told
> > its use was discouraged. Are attributes released declaratively, i.e.
> > via an ARP or does an SP have to specifically request attribute names
> > in an attribute request?
>
> An ARP is a filter against the set of attributes requested. If an SP  
> doesn't
> supply any, then the set is "*".
>
> -- Scott