I'm trying to use the delegated Authentication feature in SBS 4.0; however, I'm running into an issue with the ProfileFieldManager.  It appears that if a field is not editable, it is not showing up in the list of fields returned from ProfileFieldManager.getProfileFields.  I've looked through the DAOImpls and ManagerImpls for this; however, I do not see where this is getting filtered out.

I would like to use the Delegated Authentication service to pull data from a foreign system, sync it on login, but not allow the user's to edit it.  As it stands, the only way I can get this to work is by making the profile editable...which renders an edit-time field on the profile page during Profile edit.

To replicate this issue:

• Create a new profile field (mine is called alias)
• Make it Externally Managed (or leave it blank for all options)...
• Save
• Setup delegated service to return XML with the <alias>...</alias> tags in it.
• Debug the DelegatedSSOProvider, in the authenticate method, the profileValues list comes back empty on login
• NOW, go to Admin console, enable Editable on the alias field, and retry your login. (no restart required)
  • Debug should now show a value in the profileValues list

Any known issues behind this?  Much appreciated.