SV: Attribute Filter policy. Where am I going wrong?

[Johan Åkerstrøm]

Ah, got it, sorted!

Now I am getting a consent form for relasing the attribute. Where do I configure Shibboleth to just not ask the user about the attribute release?


________________________________________
Från: users <users-bounces at shibboleth.net> för Tom Zeller <tzeller at dragonacea.biz>
Skickat: den 29 juli 2015 16:32
Till: Shib Users
Ämne: Re: Attribute Filter policy. Where am I going wrong?

On Wed, Jul 29, 2015 at 9:27 AM, Johan Åkerstrøm
<Johan.Akerstrom at skill.no> wrote:
> Can any one see where I am going wrong here?
>
>
> attribute-filter.xml:
>
>
>
>     <afp:AttributeFilterPolicy id="adfs">
>         <afp:PolicyRequirementRule xsi:type="basic:OR">
>             <basic:Rule xsi:type="basic:AttributeRequesterString"
> value="http://adfs.sd1.cosmoskey.net/adfs/services/trust" />
>         </afp:PolicyRequirementRule>
>
>         <afp:AttributeRule attributeID="eduPersonAffiliation">
>             <afp:PermitValueRule xsi:type="basic:ANY" />
>         </afp:AttributeRule>
>     </afp:AttributeFilterPolicy>
>
>
>
>
> Log:
>
>
> 2015-07-29 16:17:54,899 - ERROR
> [net.shibboleth.idp.profile.impl.FilterAttributes:312] - Profile Action
> FilterAttributes: Error encounter
> ed while filtering attributes : Invalid Attribute Filter configuration
> 2015-07-29 16:17:54,907 - WARN
> [net.shibboleth.idp.profile.impl.FilterAttributes:315] - Filter error
> masked, clearing resolved attributes

You have an OR with only one child Rule defined ?
--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net