Configuring Shibboleth SP 2.6 to send attribute queries

[Cantor, Scott]

> First, is the above list accurate?

For the queries it makes implicitly, I believe so. There are other ways to get it to do queries of course that are not a legacy compatibility feature.

> Assuming it is, what I see happening is the SP rejects the initial response with
> "AttributeStatement must have at least one attribute" which seems odd
> given #1. I suspect something else needs configuring in order to have the SP
> switch to using attribute queries. Suggestions on what I might have missed?

The IdP is broken, it's supplying an invalid AttributeStatement element (minOccurs on Attribute is 1). That's likely circumventing the usual outcome.

-- Scott