AttributeInMetadata-problem

[Jukka Hakosalo]

Thanks Peter but I think the resolver is ok. SP gets "sn" if it's type is
"ANY", not "attributeInMetadata".

On Wed, Dec 20, 2017 at 2:38 PM, Peter Schober <peter.schober at univie.ac.at>
wrote:

> * Jukka Hakosalo <jhakosal at gmail.com> [2017-12-20 04:49]:
> > this example only mail and eppn are released. What's wrong with
> > AttributeInMetadata? Idp ignores it. Log shows no error.
> [...]
> > <AttributeRule attributeID="sn">
> >     <PermitValueRule xsi:type="AttributeInMetadata" />
> > </AttributeRule>
> [...]
> >         <md:RequestedAttribute FriendlyName="sn" Name="urn:oid:2.5.4.4"
> > NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
>
> Because in your attribute-resolver.xml the attribute's internal id
> probably is "surname", not "sn"?
>
> -peter
> --
> For Consortium Member technical support, see https://wiki.shibboleth.net/
> confluence/x/coFAAg
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20171220/527e7b8f/attachment.html>