passing eduPersonScopedAffiliation question.

[Cantor, Scott]

On 9/27/12 10:12 AM, "Mike Flynn" <shibbolethlynda at yahoo.com> wrote:

>As an SP I have lots of schools that pass this to me.  The default Shib
>definitions have always worked.  I have a school that is trying to pass
>this to me but it is not getting to me.

Most likely their metadata has no Scope extension for "someschool.edu".
There should be log messages indicating it's being filtered, that's why.

>Do I need to add 
>NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" to my
>definition?

No.

If you're federating with them one on one, then you might have to create
custom filtering rules for their scoped attributes unless you choose to
manipulate the metadata to add the extension there.

-- Scott