SP not receiving all ePSA values from IDP

[Cantor, Scott]

On 2/20/14, 11:14 AM, "Peter Schober" <peter.schober at univie.ac.at> wrote:

>* Zico <mailzico at gmail.com> [2014-02-20 17:03]:
>> And, I just tried with permitted value "member", no luck!
>> 
>> Regarding log: Are you pointing SP log? Because, in my IDP log, SAML
>> assertion is showing that values are being passed...
>
>Yes, the SP's logs will tell you exactly why each attribute was (not)
>accepted. Try the documentation for configuring logging.

Actually it unfortunately won't tell you why, but it will verify that
they're being filtered (even without changing log settings), in which case
I can safely say that one of the claims previous posted isn't true. If
member failed, either member's not sent, or the scope isn't right.

-- Scott