AttributePush

Term used to describe the delivery of attributes together with a SAML authentication assertion. When used, it eliminates an extra SOAP callback/query for the attribute information. It is the default in ShibOnedotThree when the BrowserArtifact Profile is used, but can be enabled with BrowserPOST as well. In that case, attribute information will be pushed through the client and this may have privacy implications in some environments.