title: SAML Request Attributes In AuthnRequest
body: <p>I kind of understand how basic SAML authentication supposed to work:</p>
  
  <p>User request resource at SP<br>
  SP sends auth request to IDP<br>
  IDP authenticates user and sends back some userId<br>
  SP sends attribute query to IDP for additional details with userId<br>
  IDP sends back attributes<br>
  SP gives user resource  </p>
  
  <p>My issue is, can you any way bypass AttributeQuery. When I make a SAML 2.0 request to my testing Gluu/Shibboleth server, I get back <code>givenName</code> (firstname) and <code>sn</code> (lastname). <strong>Is there anyway I can request <code>inum</code> user id and email in just the AuthnRequest?</strong></p>
  
  <p>My request is pretty simple:</p>
  
  <pre><code>&lt;samlp:AuthnRequest xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="MyPrefix1457456412304" Version="2.0" IssueInstant="2016-03-08T17:00:12Z" ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"&gt;
     &lt;saml:Issuer&gt;me.com&lt;/saml:Issuer&gt;
  &lt;/samlp:AuthnRequest&gt;
  </code></pre>
  
  <p>Request I get back is something like this:</p>
  
  <pre><code>&lt;?xml version="1.0" encoding="UTF-8"?&gt;
  &lt;saml2:Assertion xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion" ID="_bff09cf745ea5722aac3f3ec57c0ecf3" IssueInstant="2016-03-08T17:01:06.140Z" Version="2.0"&gt;
      &lt;saml2:Issuer ....
      &lt;saml2:AttributeStatement&gt;
          &lt;saml2:Attribute FriendlyName="sn" Name="urn:oid:2.5.4.4" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"&gt;
              &lt;saml2:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string"&gt;User&lt;/saml2:AttributeValue&gt;
          &lt;/saml2:Attribute&gt;
          &lt;saml2:Attribute FriendlyName="givenName" Name="urn:oid:2.5.4.42" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"&gt;
              &lt;saml2:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string"&gt;Admin&lt;/saml2:AttributeValue&gt;
          &lt;/saml2:Attribute&gt;
      &lt;/saml2:AttributeStatement&gt;
  &lt;/saml2:Assertion&gt;
  </code></pre>
  
  <p>I read the relevant part of the spec, and it seems to say the server can give back whatever it wants really (and how many attributes it wants)? <strong>Again, my question is whether I can force the SAML Gluu/Shibboleth server to give me back specific attributes as part of AuthnRequest</strong>.</p>