SAML nameids from section 6.3 of RFC 7056 not implemented

[Sam Hartman]

We should implement the name attributes described in 6.3 of RFC 7056

[Mark Donnelly (meadmaker)]

I'm not sure what code changes would be needed for this. Is this some configuration in FreeRADIUS? Is this adding a check in mech_eap? Something else?

[Sam Hartman (hartmans)]

>>>>> "Mark" == Mark Donnelly <email address hidden> writes:

    Mark> I'm not sure what code changes would be needed for this. Is
    Mark> this some configuration in FreeRADIUS? Is this adding a check
    Mark> in mech_eap? Something else?

It's adding new code in mech_eap for new attributes and for a resolver
for those attributes.
I think this is squarely wishlist and something that might be important
for some Moonshot deployments using SAML assertion, but unless you care
about those deployments, no need to fix.

[Margaret Cullen (mrw42)]

Rhys or Stefan, do you agree with Sam's comments above? If so, we should close this with a status of "won't fix".