Re: [Unity-idm-discuss] removeStaleData does not remove attribute

[Roman K. <ro...@un...>]

Hello Sander,

Sorry to be long in my email reply.

> It seems that this only removes the attribute value but not the attribute
itself.
Looking at the implementation, when a user has an attribute in a group
which was created as the result of translation from given IdP, and the
consecutive translation profile processing from this given IdP is not
returning an attribute anymore, then it should be removed from a group as
the result of removeStaleData action.

>  After setting the attribute to an empty string in the external OP, I got
an error about Attribute must have at least 1 value.
Depending on a setup this may happen. If you have an error (exception)
please share it, as well as the given Attributes type definition?

> The condition for the mapAttribute rule is attrs['attr_name'] != null &&
attr['attr_name'] != '', which woirks fine without the removeStaleData rule.
Would it be possible to perform a test using Console Authentication ->
Remote data profiles -> Wizard tool to see the outcome of the profile? To
see how attributes are mapped, and whether the attribute in question
appears in the translation result?

Best regards,
Roman

wt., 9 lip 2024 o 08:55 Sander Apweiler <sa....@fz...>
napisał(a):

> Good morning Krzysztof,
> we are testing the removeStaleData action in input translation profile.
> It seems that this only removes the attribute value but not the
> attribute itself. After setting the attribute to an empty string in the
> external OP, I got an error about Attribute must have at least 1
> values.
>
> The condition for the mapAttribute rule is attrs['attr_name'] != null
> && attr['attr_name'] != '', which woirks fine without the
> removeStaleData rule.
>
> Is the behaviour intended that uniy deletes only the attriobute value
> but not the attribute, if it is empty?
>
> Best regards,
> Sander
>
> --
> Large-Scale Data Science
> Juelich Supercomputing Centre
>
> phone: +49 2461 61 8847
> fax: +49 2461 61 6656
> email: sa....@fz...
>
> -----------------------------------------------------------------------
> -----------------------------------------------------------------------
> Forschungszentrum Jülich GmbH
> 52425 Jülich
> Sitz der Gesellschaft: Jülich
> Eingetragen im Handelsregister des Amtsgerichts Düren Nr. HR B 3498
> Vorsitzender des Aufsichtsrats: MinDir Stefan Müller
> Geschäftsführung: Prof. Dr. Astrid Lambrecht (Vorsitzende),
> Karsten Beneke (stellv. Vorsitzender), Prof. Dr. Ir. Pieter Jansens
> -----------------------------------------------------------------------
> -----------------------------------------------------------------------
>
>
> _______________________________________________
> Unity-idm-discuss mailing list
> Uni...@li...
> https://lists.sourceforge.net/lists/listinfo/unity-idm-discuss
>