troubleshooting attribute release for idp 3.3.3

[Peter Schober]

* Takeshi NISHIMURA <takeshi at nii.ac.jp> [2018-08-28 10:32]:
> On 2018/08/26 6:20, Peter Schober wrote:
> > * Scott Koranda <skoranda at gmail.com> [2018-08-25 11:47]:
> > > > * Pablo Vidaurri <psvidaurri at gmail.com> [2018-08-25 02:37]:
> > > > > How can I troubleshoot attribute resolution and filtering?
> > > 
> > > There is a command line tool.
> > 
> > The aacli is great. It just doesn't tell you /why/ something doesn't
> > leave the IDP, only /that/. Which the OP already seems to know.
>
> Is there a similar method for saml2:NameID?

Not sure what you'll mean but I always add "--saml2" to my aacli
invocations and that shows the whole Assertion, including any NameIDs
that would be going into the Assertion's subject.

-peter