Abstract
Shibboleth retrieves attribute values from the local attribute repository, filters them using a set of attribute release policies, and transports them to a service to make an authorization decision. What are the tools for managing policies, what are the options when configuring the Shibboleth IdP for this function, and how do you ensure that the right attributes are being released for the right communities? This session will discuss strategies for addressing these issues.