SimpleAttributePredicate case insensitive

[Andrew Morgan]

On Thu, 16 Feb 2017, Cantor, Scott wrote:

> On 2/15/17, 8:44 PM, "users on behalf of Andrew Morgan" <users-bounces at shibboleth.net on behalf of morgan at orst.edu> wrote:
>
>> Can an option be added to
>> net.shibboleth.idp.profile.logic.SimpleAttributePredicate to ignore case
>> when performing matches?
>
> If you mean does it currently have one, no (you can check the Javadoc if 
> you ever are in doubt, there's no hidden stuff going on, anything you 
> can do is in the class API)
>
> I don't know if that option would create any weird issues or not, 
> probably not.
>
>> Or should I use the RegexAttributePredicate instead?
>
> Certainly right now you would have to.

The regex matcher works great, so let's save everyone's time and just use 
that.

On a related note - why doesn't the IDP log when access is denied (the 
context check fails)?  All I see is an audit entry with no nameID or 
attributes listed.

Thanks,
 	Andy