JSTOR via v3 Idp

[Peter Schober]

* Dave Perry <Dave.Perry at hull-college.ac.uk> [2015-09-16 17:14]:
> It sends off a 'success' SAML responses with only SAML1 elements
> (they tell me they don't support SAML2 yet) - but this SAML1
> response doesn't include any of these attributes.

By default the IDP (v3 just like v2) does not release attributes
without end-to-end encryption (assertion or resonse).
Since SAML1 does not support encryption (xmlenc) at all, by default
the IDP will not generate an attribute statement for SAML1.

You'll either need to change that property globally or specific to the
relying party (JSTOR here) -- causing the IDP to include an attribute
statement even when speaking SAML1 -- or add support for backchannel
requests (SOAP, attribute queries).

The former is much simpler and probably OK, as long as all you ever
release via SAML1 is the common-lib-terms entitlement or an
affiliation.
-peter