Scoped attributes are being filtered

[Richard Frovarp]

I'm trying to upgrade our IdP, and to validate, I'm testing against a 
native Shibboleth SP.

The SP is filtering the ePPN and scoped affiliation attributes out. I'm 
trying to figure out where my problem is. If I make it so that those two 
attributes aren't scope filtered, the SP reports back the correct values 
with the correct scope / suffix. This makes me think that the data 
leaving the IdP is correct.

To me that indicates that I'm having trouble configuring the SP. The 
metadata for the IdP that the SP has the correct scope. However, that 
scope isn't using the same subdomain as the entity id or even the URL of 
the IdP. Not sure if that makes any difference or not. And of course 
everything is encrypted, so trying to look at the raw messages isn't the 
easiest.

Any ideas as to which end is wrong?

Thanks,

Richard