Is this a metadata error?

[Tom Scavo]

On Tue, May 28, 2013 at 12:41 PM, David Gersic <dgersic at niu.edu> wrote:
>
> InCommon's metadata starts with:
>
> <EntitiesDescriptor xmlns="urn:oasis:names:tc:SAML:2.0
> :metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" ID="INC20130524T184550" Name="urn:mace:incommon" validUntil="2013-06-07T23:00:00Z" xsi:schemaLocation="urn:oasis:names:tc:SAML:2.0:metadata sstc-saml-schema-metadata-2.0.xsd urn:mace:shibboleth:metadata:1.0 shibboleth-metadata-1.0.xsd http://www.w3.org/2000/09/xmldsig# xmldsig-core-schema.xsd">
>
> The "Name" here is "urn:mace:incommon", which doesn't match the groupID ("urn:incommon.org") in attribute-filter.xml. But I think it should, at least if I've understood the doc for AttributeRequesterInEntityGroup correctly.
>
> So to fix this, I need to change attribute-filter.xml to use the correct groupID ("urn:mace:incommon") so that it matches the Name that is in the InCommon.org metadata.
>
> Right?

Yes. See this example in the wiki:

https://wiki.shibboleth.net/confluence/display/SHIB2/IdPAddAttributeFilterExamples#IdPAddAttributeFilterExamples-ReleaseanAttributeBundletoanySPinanEntityGroup

Hope this helps,

Tom