"Affiliation" attribute

[Cantor, Scott]

> Eduserv provided us with 2 accounts which set up on our end. Login/Access
> for one of the accounts is working as expected. However, the other account
> is not. Debugging on my local indicates that "affiliation" and "targetedid"
> attributes are not visible in the Headers. Looking at the log, I see the
> following:

"targetedid" generally tends to refer to something you should not be supporting or consuming. The "scoped" (value at scope) syntax for a pairwise ID in SAML 1.1 was a mistake/bug and is not a valid syntax.
 
The affiliation filtering issue is presumably due to the metadata for the IdP not including the relevant Scope extension.

-- Scott