attribute filter rule precidence

[Liam Hoekenga]

It appears that if an SP matches multiple filter policies, and one policy
denies the release of an attribute, but another allows it, the attribute is
released.

I'd hoped that maybe moving the rules around in the file might change which
rule wins, but it hasn't.

Is it possible to deny publishing an attribute that has one policy deny it,
but another approve?

Or do I need to be more careful / specific in setting up my policy groups?

Liam
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20180326/3c0994da/attachment.html>