Remove Attribute Transformer Action
A remove attribute transformer action does exactly what one would expect - removes one or more of the incoming attributes from the authentication. As this is a very common action it is also included as a step in many of the other actions, and this can be seen as a standalone option for removing attributes.
By default, this action removes attributes from the subject attributes set. It can be configured to remove from the context attributes or the action attributes, by setting the attributes-location configuration setting.
Configuring attributes for removal#
Configuring attributes for exclusion is as simple as adding them to the list of excluded-attributes, which is also the only configuration option for this transformer action.
Back-channel support#
This action can be used in back-channel authentication.