Re: [Unity-idm-discuss] attribute "Can be provided by remote IdP; if not then collected interactively" problem

[Krzysztof B. <kb...@un...>]

Hi Sander,

W dniu 01.03.2017 o 15:42, Sander Apweiler pisze:
> Hi all,
>
> I created a new registration form for an additional IdP. Because I'm
> not sure if CN is release I chosed "Can be provided by remote IdP; if
> not then collected interactively" as was to collect the value. The
> manual says: "In this mode the user can fill the data only if it was
> not provided by a remote IdP. If it was provided by remote IdP then
> this data is hidden in the form."
>
> The registration form asked me for CN although the IdP has released the
> CN. The CN value from IdP was not displayed in registration form. I
> entered another CN than the IdP provided. After reading the attributes
> in userhome i saw, unity used the CN from IdP and not from user.
>
> As admin I expect, that CN from IdP is shown in the form or CN is not
> collected in form if the IdP provided it. Like it is written in manual.
> As user it i don't know why there stored values differs from my input.
> Is this behaviour wanted?

No, what you described is a bug in UI: in the described case there 
should be no textfield collecting cn in the form. The rest (use of the 
remote IdP-provided value) is correct.

Will be fixed in the 1.9.5.

> Is there a release date for next unity?

Yes: couple of minutes ago :-)

Best,
Krzysztof