Google Apps using Shibboleth

[Paul Hethmon]

Turn on DEBUG level logging for the IdP category and look at what the IdP
does to the attributes during resolution. It will tell exactly which
attributes (including the principal) it resolves and which ones it uses.

The information is in the logs.

Paul

On 12/3/12 1:47 PM, "Prasanna" <PVBalachandar at imperosoftware.com> wrote:

>Hello Chris,
>
>Despite of changing the Attribute filter policy id like this below, still
>I
>get the same error...
>
><afp:AttributeFilterPolicy id="first">
>         <afp:PolicyRequirementRule
>xsi:type="basic:AttributeRequesterString"
>value="google.com/a/imperoidm.com"
>/> 
>         <afp:AttributeRule attributeID="principal">
>             <afp:PermitValueRule xsi:type="basic:ANY" />
>         </afp:AttributeRule>
></afp:AttributeFilterPolicy>
>
>      
>
><afp:AttributeFilterPolicy id="second">
>         <afp:PolicyRequirementRule xsi:type="basic:NOT">
>                 <basic:Rule xsi:type="basic:AttributeRequesterString"
>value="google.com/a/imperoidm.com" />
>         </afp:PolicyRequirementRule>
>         <afp:AttributeRule attributeID="transientId">
>             <afp:PermitValueRule xsi:type="basic:ANY" />
>         </afp:AttributeRule>
></afp:AttributeFilterPolicy>
>
>Thanks
>Prasanna
>
>
>
>-----
>Prasanna V B
>--
>View this message in context:
>http://shibboleth.1660669.n2.nabble.com/Google-Apps-using-Shibboleth-tp758
>3436p7583471.html
>Sent from the Shibboleth - Users mailing list archive at Nabble.com.
>--
>To unsubscribe from this list send an email to
>users-unsubscribe at shibboleth.net