RE: [saml-dev] Requesting users attributes as part of Authentication Request Protocol

["Scott Cantor" <cantor.2@osu.edu>]

> Even though I have seen in some documentations that it is possible to
> request users' attributes from the IdP as part of the authentication
request
> protocol (i.e. <AuthnRequest> element), I did not manage to find
> specification which would indicate how to do it? Can someone forward me to
> such a specification?

The only way to do it in SAML is by reference using metadata and the
AttributeConsumingServiceIndex attribute. A proposal has been floated to add
an extension to do it in-band dynamically, but it's not in the draft stage
yet.

-- Scott