release attribute not in saml response

[Qian, Yi]

Hello,

I am trying to set up with salesforce.com following the wiki of UCSF. I define
EppnNameID as


<resolver:AttributeDefinition id="EppnNameID"

xsi:type="ad:Simple" xmlns="urn:mace:shibboleth:2.0:resolver:ad"

sourceAttributeID="eduPersonPrincipalName">

<resolver:Dependency ref="eduPersonPrincipalName" />

<resolver:AttributeEncoder xsi:type="SAML2StringNameID"

xmlns="urn:mace:shibboleth:2.0:attribute:encoder" nameFormat="urn:oasis:names:tc:SAML:2.0:nameid-format:unspecified" />

</resolver:AttributeDefinition>


In attribute-filter.xml, I have

<afp:AttributeFilterPolicy>
  <afp:PolicyRequirementRule xsi:type="basic:AttributeRequesterString" value="https://MY_ORGANIZATION.my.salesforce.com"<https://your_organization_here.my.salesforce.com/> />
  <afp:AttributeRule attributeID="EppnNameID">
    <afp:PermitValueRule xsi:type="basic:ANY" />
  </afp:AttributeRule>

  <afp:AttributeRule attributeID="User.IsActive">
    <afp:PermitValueRule xsi:type="basic:ANY"/>
  </afp:AttributeRule>
</afp:AttributeFilterPolicy>

But in the idp-process log, the saml response send back to salesforce does not have this EppnNameID, it does include User.IsActive and other attributes that release to every SP, such as eppa etc.

Yi
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130622/b92dbac8/attachment-0001.html