Error resolving attributes

[Nate Klingenstein]

Hong,

Your IdP will usually send an assertion with an AuthenticationStatement but no AttributeStatement at all.  The SP will not see this as an error and it’s not an error in SAML because attributes aren’t mandatory and you can’t know whether the IdP meant to send any.

Hope this helps,
Nate.

Semt frim mt iPone

> On Aug 31, 2018, at 9:17 AM, Hong Ye <hy93 at cornell.edu> wrote:
> 
> Hello,
>  
> I saw “Error resolving attributes” in IDP process log and I found corresponding entry in IDP audit log which has no attribute released. When this error occurred, what was status shown in SAML assertion?  
>  
> Thanks,
> Hong
>  
> -- 
> 
> For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
> 
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20180831/f39a4a34/attachment.html>