Decoding encrypted attributes from an IDP

[Cantor, Scott]

> So there appear to be attributes, but my SP is unable to decrypt them. From
> reading the docs, I found that the <AttributeExtractor> will support
> <saml2:EncryptedAttribute> elements, but I see we are getting
> <saml:EncryptedAttribute>. Could this be causing us to not properly handle
> the elements?

No, not unless that prefix isn't declared somewhere to be the right namespace. If it's not handling them, there should be logs indicating why, but I don't know that this has ever been tested. I can't recall whether I ever tried it in an interop event, and the IdP we have doesn't support the feature (only at the assertion level).

> Also, on ApplicationDefaults, I have encrypted=true (which I
> think only applies to outbound messages though)

It does.
 
> PS: I would like to add that of all the open source message boards I have
> used, the shib folks respond the fastest, hands down. Thank you for that.

Thank you for noticing.

-- Scott