Reference: Send only subset of the groups in the SAML assertions
HubertDennis, in July 2016, you posted in the above thread regarding the use of expressions to filter an attribute:
However you have to do this using a workaround since Federation Partnership Expressions don't work [my emphasis]. So the hack is to do it via the Attribute Mapping in User Directory Object.
Questions for any and all:
- Do expressions work any better (at all?) in the versions of SiteMinder that have been released since Hubert posted his comment?
- If not, is any work in progress to address this gap?
I'm at a customer site where they're not particularly keen on the idea writing Java code for Assertion Generator Plugins, nor do they like the idea of adding a growing number of attribute mappings to their user directory configuration. Using supported, out-of-the-box functionality in the WAMUI would be ideal.