Shibboleth Developers

[Leif Johansson <>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 02/17/2011 07:57 AM, Brent Putman wrote:
> 
> 
> On 2/17/11 12:46 AM, Nate Klingenstein wrote:
>>
>> 2)  They'd like to include a verbal explanation of why an
>> <md:RequestedAttribute> is requested.  This would be useful both to
>> the user and administrator, but primarily intended for display to the
>> user during consent acquisition.  This would preferably be multivalued
>> in order to support multiple locales, but something like:
>>
>> <md:RequestedAttribute ...>
>> <mdui:Description lang="en">usage of this attribute</description>
>> </md:RequestedAttribute>
>>
> 
> 
> This wouldn't be schema-valid per SAML 2.0 metadata spec, the complex
> type underlying RequestedAttribute is not extensible in that way.

If you ask me - if we are going to touch RequestedAttribute we should
fix it more throughly. For instance it is often desirable to request
a set of (to the application) equivalent attribute, one of which is
enough. The canonical example is cn vs displayName.

        Cheers Leif
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk1c2yYACgkQ8Jx8FtbMZnfzwwCeIg581X11ByCKJkf+o1UYo5DD
VJoAn0g0OIZKGgP2FvAK0xkujPxoicFj
=vrVg
-----END PGP SIGNATURE-----