Attribute Filter policy. Where am I going wrong?

[Mark K. Miller]

On Wed, 29 Jul 2015, Johan Åkerstrøm wrote:

> Can any one see where I am going wrong here?

I think so.  Looks to me like your saying xsi:type="basic:OR" but then 
only show one possible value.  Maybe you'd want something like this:

     <afp:AttributeFilterPolicy id="adfs">
         <afp:PolicyRequirementRule xsi:type="basic:AttributeRequesterString" value="http://adfs.sd1.cosmoskey.net/adfs/services/trust" />

Hope that helps,

Max


> attribute-filter.xml:
> 
> 
>
>     <afp:AttributeFilterPolicy id="adfs">
>         <afp:PolicyRequirementRule xsi:type="basic:OR">
>             <basic:Rule xsi:type="basic:AttributeRequesterString"
> value="http://adfs.sd1.cosmoskey.net/adfs/services/trust" />
>         </afp:PolicyRequirementRule>
>
>         <afp:AttributeRule attributeID="eduPersonAffiliation">
>             <afp:PermitValueRule xsi:type="basic:ANY" />
>         </afp:AttributeRule>
>     </afp:AttributeFilterPolicy>
> 
> 
> 
> 
> Log:
> 
> 
> 2015-07-29 16:17:54,899 - ERROR
> [net.shibboleth.idp.profile.impl.FilterAttributes:312] - Profile Action
> FilterAttributes: Error encounter
> ed while filtering attributes : Invalid Attribute Filter configuration
> 2015-07-29 16:17:54,907 - WARN
> [net.shibboleth.idp.profile.impl.FilterAttributes:315] - Filter error
> masked, clearing resolved attributes
> 
> 
> 
> 
>