AttributeValue was not of a supported type and contains no child elements

[Nate Klingenstein]

Jozef,

The attribute-policy.xml filtration system in the SP is not awesomely documented, but that PermitValueRule strikes me as probably wrong if you can't count on receiving NameIDQualifiers.  You'll see that those differ in the successful and failed examples.

http://shibboleth.net/pipermail/users/2013-March/008749.html

It's up to you whether to require the check and enforce it if so, but we can't really tell you that it is or is not important in your deployment.

Hope this helps,
Nate.

On Oct 30, 2014, at 8:50 AM, Jozef M. <vidiecan at gmail.com<mailto:vidiecan at gmail.com>> wrote:

from attribute-policy.xml

<afp:AttributeRule attributeID="persistent-id">
   <afp:PermitValueRule xsi:type="saml:NameIDQualifierString"/>
</afp:AttributeRule>


-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20141030/1dbb5e89/attachment-0001.html