help with first-time SP not releasing attributes/eppn

[Peter Schober]

* Rob Gorrell <rwgorrel at uncg.edu> [2013-05-16 16:23]:
> 2013-05-16 10:17:24 DEBUG Shibboleth.AttributeDecoder.Scoped [2]: decoding
> ScopedAttribute (eppn) from SAML 2 Attribute
> (urn:oid:1.3.6.1.4.1.5923.1.1.1.6) with 1 value(s)

Here's a correctly mapped eppn, with 1 value. Which is good.

> 2013-05-16 10:17:24 DEBUG Shibboleth.AttributeFilter [2]: applying
> filtering rule(s) for attribute (eppn) from (
> https://idp-d.uncg.edu/idp/shibboleth)
> 2013-05-16 10:17:24 WARN Shibboleth.AttributeFilter [2]: removed value at
> position (0) of attribute (eppn) from (https://idp-d.uncg.edu/idp/shibboleth)

Here eppn is removed after filtering out invalid values.

Several people have told you why before: The scope in the scoped
attributes your IdP produces (such as eppn) does not seem to match the
scope your SP sees in the SAML metadata for your IDP.

The reason displayName is not found is due to a missing active (i.e.,
not commented-out) entry in your attribute-map.xml

Two different problems with two different solutions.
-peter