AttributeInMetadata-problem

[Tom Poage]

I think a default setting changed. Try setting either isRequired="true" in the RequestedAttribute element, or onlyIfRequired="false" in the PermitValueRule.

Tom.

On Dec 20, 2017, at 5:05 AM, Jukka Hakosalo <jhakosal at gmail.com<mailto:jhakosal at gmail.com>> wrote:

Thanks Peter but I think the resolver is ok. SP gets "sn" if it's type is "ANY", not "attributeInMetadata".

On Wed, Dec 20, 2017 at 2:38 PM, Peter Schober <peter.schober at univie.ac.at<mailto:peter.schober at univie.ac.at>> wrote:
* Jukka Hakosalo <jhakosal at gmail.com<mailto:jhakosal at gmail.com>> [2017-12-20 04:49]:
> this example only mail and eppn are released. What's wrong with
> AttributeInMetadata? Idp ignores it. Log shows no error.
[...]
> <AttributeRule attributeID="sn">
>     <PermitValueRule xsi:type="AttributeInMetadata" />
> </AttributeRule>
[...]
>         <md:RequestedAttribute FriendlyName="sn" Name="urn:oid:2.5.4.4"
> NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20171220/b0963b24/attachment.html>