Salesforce error when authing against Shibboleth

[Peter Schober]

* Ben Branch <BBranch at uco.edu> [2014-08-09 01:08]:
>     <afp:AttributeFilterPolicy>
>       <afp:PolicyRequirementRule xsi:type="basic:AttributeRequesterString" value="sp.testshib.org"/>
>       <afp:AttributeRule attributeID="mail">
>         <afp:PermitValueRule xsi:type="basic:ANY"/>
>       </afp:AttributeRule>
>     </afp:AttributeFilterPolicy>

Also you cannot just leave out arbitrary parts of the SP's entityID in
the basic:AttributeRequesterString rule above (the value of "value" is
wrong), the name has to match verbatim.
-peter