On 9/9/13 10:52 AM, "Mike Flynn" <shibbolethlynda at yahoo.com> wrote: >I get this attribute from lots of Idps and it works fine. I just hooked >up another Idp that wants to pass unscoped affiliation. This is what is >in the assertion: "Department" isn't a valid affiliation value, it's blocked by the filtering rule in the SP. -- Scott