Path access control, a bit better

[Cantor, Scott]

On 7/12/17, 3:40 PM, "users on behalf of Young, Darren" <users-bounces at shibboleth.net on behalf of Darren.Young at chicagobooth.edu> wrote:

> Is there anywhere else to check to make sure it¹s being extracted?

/Shibboleth.sso/Session, after adding the showAttributeValues option to the handler so it dumps things out.

Incidentally, that non-OID URN is invalid, you don't have standing to define names like that.

-- Scott