eduPersonTargetedId question

[Nate Klingenstein]

Mike,

You're treating a string-like eduPersonTargetedID as a scoped  
eduPersonTargetedID.  This is understandable given ample early  
confusion about how to express the concept behind eduPersonTargetedID  
and whether it should be scoped.

https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPTargetedID

Do a word search for "botch" for the entire sordid story.

You should find a log message in shibd.log about the attribute being  
discarded because no valid scope was obtained.

The most expedient fix in your case would be to change the attribute  
decoder to a simple attribute decoder, and edit attribute-filter.xml  
to remove the scoping check.

<!--
         <afp:AttributeRule attributeID="targeted-id">
             <afp:PermitValueRuleReference ref="ScopingRules"/>
         </afp:AttributeRule>
-->

Hope I've got this right,
Nate.

On Sep 26, 2012, at 13:26 , Mike Flynn wrote:

> What am I doing wrong that prevents this from passing?

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20120926/0f3d3912/attachment.html