Configuring Shibboleth SP 2.6 to send attribute queries

[Cantor, Scott]

On 8/23/17, 2:14 PM, "users on behalf of Misagh Moayyed" <users-bounces at shibboleth.net on behalf of mmoayyed at unicon.net> wrote:

> One final question on the topic: I see the SP issuing a warn statement in the logs saying "Ignoring the assertion without strongly
> matching NameID in Subject". I am guessing that the SP is comparing the NameID elements of the attribute query response with
> that of the original response?

The original request, yes, the standard requires that.

> Logs don't exactly confirm this, nor do they fully explain which bit is failing to pass comparisons. (Looked up C++ code to see how
> the comparison is done).  

It won't say what part, but the comparison is defined by the standard so diagnosing it is rather obvious if it fails.

-- Scott