AttributeInMetadata-problem

[Jukka Hakosalo]

Hi,

We have an IdP 3.3.2 in test use.

There are problems with releasing attributes type AttributeInMetadata. In
this example only mail and eppn are released. What's wrong with
AttributeInMetadata? Idp ignores it. Log shows no error.


Attribute-filter is:
---------------------
<?xml version="1.0" encoding="iso-8859-1"?>

<AttributeFilterPolicyGroup id="ShibbolethFilterPolicy"
        xmlns="urn:mace:shibboleth:2.0:afp"
        xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
        xsi:schemaLocation="urn:mace:shibboleth:2.0:afp
http://shibboleth.net/schema/idp/shibboleth-afp.xsd">

<AttributeFilterPolicy id="toall">

<PolicyRequirementRule xsi:type="ANY" />

<AttributeRule attributeID="sn">
    <PermitValueRule xsi:type="AttributeInMetadata" />
</AttributeRule>

<AttributeRule attributeID="eduPersonPrincipalName">
    <PermitValueRule xsi:type="ANY" />
</AttributeRule>

<AttributeRule attributeID="mail">
    <PermitValueRule xsi:type="ANY" />
</AttributeRule>

</AttributeFilterPolicy>

</AttributeFilterPolicyGroup>
----------------------------------

Metadata's AttributeConsumingService:
-------------------------------------
<md:AttributeConsumingService index="1" isDefault="true">
        <md:ServiceName xml:lang="fi">Sippo</md:ServiceName>
        <md:ServiceName xml:lang="en">Sippo</md:ServiceName>
        <md:ServiceDescription xml:lang="fi">Sippo</md:ServiceDescription>
        <md:ServiceDescription xml:lang="en">Sippo</md:ServiceDescription>
        <md:RequestedAttribute FriendlyName="eduPersonPrincipalName"
Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6"
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
        <md:RequestedAttribute FriendlyName="mail"
Name="urn:oid:0.9.2342.19200300.100.1.3"
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
        <md:RequestedAttribute FriendlyName="sn" Name="urn:oid:2.5.4.4"
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
    </md:AttributeConsumingService>
-----------------------------------

Thanks!
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20171220/87c334c4/attachment.html>