On 1/9/06, Giuseppe Sarno <> wrote:
>
> SAML provide a way to bundle attributes in a saml assertion.
Yes, in an AttributeStatement.
> I didn't see anything about this in the spec so I am assuming it's not
> possible but is there away to modify attributes (from a SP for example) ?
Attributes are asserted by an IdP, not an SP, so I'm not sure I
understand your question.
> I guess this means that Attributes in a way have to be preprovisioned at the
> IDP (via other mean).
There is an assumption that an IdP can provide attributes concerning a
subject upon request, yes.
Tom
