SP not receiving all ePSA values from IDP

[Zico]

Yes, it's a child element of IDPSSODescriptor. ( And, IDPSSODescriptor is
the child element of EntityDescriptor )

<EntityDescriptor entityID="https://myIDP/idp/shibboleth">
         <IDPSSODescriptor errorURL="https://myIDP/identity/feedback.htm"
protocolSupportEnumeration="urn:mace:shibboleth:1.0
urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol">
                   <Extensions>
                            <shibmd:Scope regexp="false">private.com
</shibmd:Scope>
                            <shibmd:Scope
regexp="false">home.private.com</shibmd:Scope>

                  </Extensions>
....
....

And, I just tried with permitted value "member", no luck!

Regarding log: Are you pointing SP log? Because, in my IDP log, SAML
assertion is showing that values are being passed...





On Thu, Feb 20, 2014 at 9:54 AM, Peter Schober
<peter.schober at univie.ac.at>wrote:

> * Zico <mailzico at gmail.com> [2014-02-20 16:39]:
> > Thanks for your tip, Peter. I made the changes in my IDP metadata with
> > multiple shibdmd:Scopes ( ** ). But, still nothing changing...
> >
> > *<Extensions>            <shibmd:Scope regexp="false">private.com
> > <http://private.com></shibmd:Scope>            <shibmd:Scope
> > regexp="false">home.private.com <http://home.private.com></shibmd:Scope>
> >  </Extensions>*
>
> Just in case: Make sure the it's a child element of
> IDPSSODescriptor/Extensions (not EntityDescriptor/Extensions).
> >From the snippet above it's impossible to tell.
> -peter
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>



-- 
Best,
Zico
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20140220/7aad6bf2/attachment.html