SAML multiple attributes (allow for multiple and to list those which are allowed)
We have come to understand that ILLiad's SAML module does not support SAML2 attributes sent by the Identity Provider with multiple values. These would take the basic form in the SAML assertion XML like:
<saml:Attribute Name="multiAttributeName">
<saml:AttributeValue>Value 1/saml:AttributeValue
<saml:AttributeValue>Value 2/saml:AttributeValue
<saml:AttributeValue>Value 3/saml:AttributeValue
/saml:Attribute
It is described on pg 31 of the spec https://www.oasis-open.org/committees/download.php/56776/sstc-saml-core-errata-2.0-wd-07.pdf#page=31
As this is a common method of delivering data structures inside of SAML attributes especially when specifying items like user affiliations or group memberships, we request that support be added in the future to read and operate on multi-value/list attributes within the RemoteAuthValidation table.
melissaeb
shared this idea