Are you getting non scoped attributes? If so, it might be that the attribute value is being dropped by the code which checks the scope against the metadata. I would expect to see evidence of this in the shibd.log Does the metadata for your IdP (on your SP) have the required <shibmd:Scope/> statements in it? Rod