Attribute Filter policy. Where am I going wrong?

Tom Zeller tzeller at dragonacea.biz
Wed Jul 29 10:32:27 EDT 2015


On Wed, Jul 29, 2015 at 9:27 AM, Johan Åkerstrøm
<Johan.Akerstrom at skill.no> wrote:
> Can any one see where I am going wrong here?
>
>
> attribute-filter.xml:
>
>
>
>     <afp:AttributeFilterPolicy id="adfs">
>         <afp:PolicyRequirementRule xsi:type="basic:OR">
>             <basic:Rule xsi:type="basic:AttributeRequesterString"
> value="http://adfs.sd1.cosmoskey.net/adfs/services/trust" />
>         </afp:PolicyRequirementRule>
>
>         <afp:AttributeRule attributeID="eduPersonAffiliation">
>             <afp:PermitValueRule xsi:type="basic:ANY" />
>         </afp:AttributeRule>
>     </afp:AttributeFilterPolicy>
>
>
>
>
> Log:
>
>
> 2015-07-29 16:17:54,899 - ERROR
> [net.shibboleth.idp.profile.impl.FilterAttributes:312] - Profile Action
> FilterAttributes: Error encounter
> ed while filtering attributes : Invalid Attribute Filter configuration
> 2015-07-29 16:17:54,907 - WARN
> [net.shibboleth.idp.profile.impl.FilterAttributes:315] - Filter error
> masked, clearing resolved attributes

You have an OR with only one child Rule defined ?


More information about the users mailing list