Shibboleth Developers

[Tom Scavo <>]

On Fri, Feb 18, 2011 at 12:57 AM, Nate Klingenstein 
<>
 wrote:
>
> Their intent is to build an interface that supports the optionality of
> <md:RequestedAttribute> in consent, and "isRequired='false'" is almost
> impossible to interpret without explanatory text.

I'm about ready to find that out for myself :-) but I don't doubt it
at all. The most complicated parts of SAML are certain XML attributes
here and there, and isRequired is almost certainly one of them. We're
preparing to spin our wheels on this one.

> It may be that the
> optionality was a bad idea in the first place, but without that or an
> <OR>/policy logic, I don't see how you would support "a persistent,
> non-reassigned identifier".

I've given up on that. I agree with Scott (and others) that it's
either XACML or nothing.

Tom