SP not receiving all ePSA values from IDP

[Zico]

Hello Guru,

Lately I am facing an interesting situation. I am trying to pass three
types of ePSA values from my IDP. 1. manager at private.com 2.
manager at home.private.com. 3. staff at private.com.

>From my IDP's SAML assertion, I can see IDP is actually passing all ePSA
attributes but SP is *not*  getting "manager at home.private.com" ( #2 ).












*<saml2:Attribute FriendlyName="eduPersonScopedAffiliation"
Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.9"
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
<saml2:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema
<http://www.w3.org/2001/XMLSchema>"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance
<http://www.w3.org/2001/XMLSchema-instance>"
xsi:type="xs:string">manager at private.com
<manager at private.com></saml2:AttributeValue>          <saml2:AttributeValue
xmlns:xs="http://www.w3.org/2001/XMLSchema
<http://www.w3.org/2001/XMLSchema>"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance
<http://www.w3.org/2001/XMLSchema-instance>"
xsi:type="xs:string">manager at home.private.com
<manager at home.private.com></saml2:AttributeValue>
<saml2:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema
<http://www.w3.org/2001/XMLSchema>"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance
<http://www.w3.org/2001/XMLSchema-instance>"
xsi:type="xs:string">staff at private.com
<staff at private.com></saml2:AttributeValue>       </saml2:Attribute>...
...15:07:18.262 - INFO [Shibboleth-Audit:1028] -
20140219T200718Z|urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect|_26a3e24ca5d001a1b868c9bfd822b380|https://testorg.com/shibboleth-sp|urn:mace:shibboleth:2.0:profiles:saml2:sso|https://org.is.here/idp/shibboleth|urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST|_961fc6881a6e41a9a1db91f418e7535f|zicot|urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport|uid,eduPersonPrincipalName,eduPersonScopedAffiliation,eduPersonTargetedID,|||
<https://testorg.com/shibboleth-sp|urn:mace:shibboleth:2.0:profiles:saml2:sso|https://org.is.here/idp/shibboleth|urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST|_961fc6881a6e41a9a1db91f418e7535f|zicot|urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport|uid,eduPersonPrincipalName,eduPersonScopedAffiliation,eduPersonTargetedID,|||>
*

Is there anything I am missing? Any kind of hint would be helpful.

-- 
Best,
Zico
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20140220/71ae3c0f/attachment-0001.html