Issue with releasing eduPersonPrincipalName to Specific SP

[Cantor, Scott]

On 4/26/17, 6:05 PM, "users on behalf of Brent Putman" <users-bounces at shibboleth.net on behalf of putmanb at georgetown.edu> wrote:

> So does an encoder of SAML2ScopedString work with an AttributeDefintion of type Simple, as the OP has it?  Maybe that's the
> problem.  If he wants to base on 'userPrincipalName' (from AD, etc), which is already a scoped string, maybe he needs to switch
> encoder to type SAML2String?  I always forget how the scoped vs non-scoped stuff works.

Sorry, I missed that. Yes, that's the problem, the attribute definition needs to be changed from Simple to Scoped. You can't operate on a simple value with a scoped encoder.

-- Scott