I'd suggest that the 'right' way to do it is one attribute with two (or
more) values but I don't believe there is anything spec-wise that prohibits
the other approach.
On 6/2/08 3:19 PM, "Scott Cantor" <> wrote:
>> I can't find anything in any of the SAML specs that prohibits multiple
>> occurrences of the same attribute in a SAML attribute assertion. For
>> example, if an IdP wished to assert two e-mail addresses, it seems the
>> IdP could formulate one attribute with two values or two attributes
>> (with the same name) each with a single value. Am I interpreting this
>> correctly?
>
> Far as I know.
>
> -- Scott
>
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail:
> For additional commands, e-mail:
>
