No NameID released

[Kevin Foote]

On Aug 11, 2014, at 4:16 PM, David Bantz <dabantz at alaska.edu> wrote:

> 09:15:25.424 - DEBUG [edu.internet2.middleware.shibboleth.idp.profile.AbstractSAMLProfileHandler:504] - No attributes for principal 'dabantz' support encoding into a supported name identifier format for relying party ‘urn:amazon:webservices’


Your last DEBUG line is telling you exactly what is “wrong”  
You have to be missing some thing in your reported config. 

We can not see the remainder of you filter file .. an explicit deny on transient is still possible. We can only guess and report what we have experience with :-) I have missed blocking or unblocking attributes which resulted in this - obviously :)

--------
thanks
 kevin.foote