attribute push

[XiaoXia Dong]

Hi Shibboleth Experts,

We have an application which its attribute push works on campus ip address, but not from other internet IP addresses. We are using Shibboleth IdP 1.3.x and could not figure out why this is happening.  Could any of your guys help and point out where I may need to look for? Thanks.

The following is what the SAML assertion looks like for a try from off campus:
<Assertion xmlns="urn:oasis:names:tc:SAML:1.0:assertion" AssertionID="_62c0e0368a6da881a94eb2f113feb8da" IssueInstant="2012-04-02T15:33:03.668Z" Issuer="urn:mace:incommon:northwestern.edu<http://northwestern.edu>" MajorVersion="1" MinorVersion="1">
    <Conditions NotBefore="2012-04-02T15:33:03.668Z" NotOnOrAfter="2012-04-02T15:38:03.668Z">
      <AudienceRestrictionCondition>
        <Audience>https://adeassodev.northwestern.edu/simplesaml/module.php/saml/sp/metadata.php/nu_passport</Audience>
        <Audience>urn:mace:incommon</Audience>
      </AudienceRestrictionCondition>
    </Conditions>
    <AuthenticationStatement AuthenticationInstant="2012-04-02T15:33:03.668Z" AuthenticationMethod="urn:oasis:names:tc:SAML:1.0:am:unspecified">
      <Subject>
        <NameIdentifier Format="urn:mace:shibboleth:1.0:nameIdentifier" NameQualifier="urn:mace:incommon:northwestern.edu<http://northwestern.edu>">XXX</NameIdentifier>
        <SubjectConfirmation>
          <ConfirmationMethod>urn:oasis:names:tc:SAML:1.0:cm:bearer</ConfirmationMethod>
        </SubjectConfirmation>
      </Subject>
      <SubjectLocality IPAddress="209.114.43.98"/>
    </AuthenticationStatement>
  </Assertion>

>From here you could see that it missed the <AttributeStatement></AttributeStatement>.

Thank you for any help in advance!
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20120402/3cf5ac8b/attachment-0001.html