Attribute filtering problem with AND on both IdP and SP

[John Horne]

On Thu, 2015-02-12 at 23:41 +0000, Cantor, Scott wrote:
> > > No value of ePA will match both "staff" AND match "member" so that
> > > guarantees no value released.
> > >
> > I don't think that's right.
> 
> It's right. A permit rule evaluates exactly one value at a time, and
> no one value can be both.
>
Ah, I misread the message. I thought he meant that the attribute
couldn't take multiple values.



John.

-- 
----------------------------------------------------
John Horne                   Tel: +44 (0)1752 587287
Plymouth University, UK