Shib IdP 3 and IOP online service

[Rod Widdowson]

> > The default is to not push attributes, but users are still prompted
> > for consent (because they can't be prompted during back-channel
> > attribute query).
> >
> > Hope this helps.
> Yes, thanks for help.

I'd be interested in the result of this experiment.  It seems as though something dodgy is up since you report that no attributes were actually released to the SP even though you accepted them.

At the same time I have seen attributes release to a SAML1 SP using attribute pull, so there is something weird either about the SP or your configuration.

Would it be useful if I dug out some other logging classes to help diagnose this flow?

Rod