SV: Attribute Filter policy. Where am I going wrong?

[Johan Åkerstrøm]

It did. Thanks!

________________________________________
Från: users <users-bounces at shibboleth.net> för Mark K. Miller <max at psu.edu>
Skickat: den 29 juli 2015 16:33
Till: Shib Users
Ämne: Re: Attribute Filter policy. Where am I going wrong?

On Wed, 29 Jul 2015, Johan Åkerstrøm wrote:

> Can any one see where I am going wrong here?

I think so.  Looks to me like your saying xsi:type="basic:OR" but then
only show one possible value.  Maybe you'd want something like this:

     <afp:AttributeFilterPolicy id="adfs">
         <afp:PolicyRequirementRule xsi:type="basic:AttributeRequesterString" value="http://adfs.sd1.cosmoskey.net/adfs/services/trust" />

Hope that helps,

Max


> attribute-filter.xml:
>
>
>
>     <afp:AttributeFilterPolicy id="adfs">
>         <afp:PolicyRequirementRule xsi:type="basic:OR">
>             <basic:Rule xsi:type="basic:AttributeRequesterString"
> value="http://adfs.sd1.cosmoskey.net/adfs/services/trust" />
>         </afp:PolicyRequirementRule>
>
>         <afp:AttributeRule attributeID="eduPersonAffiliation">
>             <afp:PermitValueRule xsi:type="basic:ANY" />
>         </afp:AttributeRule>
>     </afp:AttributeFilterPolicy>
>
>
>
>
> Log:
>
>
> 2015-07-29 16:17:54,899 - ERROR
> [net.shibboleth.idp.profile.impl.FilterAttributes:312] - Profile Action
> FilterAttributes: Error encounter
> ed while filtering attributes : Invalid Attribute Filter configuration
> 2015-07-29 16:17:54,907 - WARN
> [net.shibboleth.idp.profile.impl.FilterAttributes:315] - Filter error
> masked, clearing resolved attributes
>
>
>
>
>