Attribute-Filter afp?

[Klingenstein, Nate]

Samuel,

XML namespace use (afp: and so forth) was eradicated to the point possible in v3.  The old format will generally still work.

The “why” is why you’re asking: it was confusing for users to have multiple different XML namespaces used in that way, so it was flattened.

Take care,
Nate.

From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Samuel James
Sent: Monday, January 30, 2017 11:43 AM
To: users at shibboleth.net
Subject: Attribute-Filter afp?

I have read the online docs -- but it hasn't sunk in and hoping someone could explain.

We are looking after 2 Shibboleth instances -- why does old (v2) have 'afp' in the attribute filter -- does it matter that the new V3 does not?



The legacy V2:


<afp:AttributeRule attributeID="mail">

            <afp:PermitValueRule xsi:type="basic:ANY"/>

        </afp:AttributeRule>



The new Shibboleth v3:

        <AttributeRule attributeID="mail">

            <PermitValueRule xsi:type="ANY" />

        </AttributeRule>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170130/497912ba/attachment.html>