Attribute filtering fails with IssuerRegistrationAuthority policy

[Geoffroy ARNOUD]

Exact Peter. Thank you

@Scott:
- No I’m not proxying. Its just IDP. I mentioned the SP just to state that my md files generation process is used elsewhere, therefore assuming it’s working fine
- aacli indeed manages metadata well in my case, an not only uses requester id

Best regards

Geoffroy

> Le 26 avr. 2021 à 14:25, Peter Schober <peter.schober at univie.ac.at> a écrit :
> 
> * Cantor, Scott <cantor.2 at osu.edu> [2021-04-26 14:21]:
>> And you're proxying and actually need an issuer policy? Filtering
>> for SPs is based on requester, not issuer.
> 
> I think it's just a case of copy/paste, i.e..
> 
> - <PolicyRequirementRule xsi:type="IssuerRegistrationAuthority" registrars="https://federation.renater.fr/"/>
> + <PolicyRequirementRule xsi:type="RegistrationAuthority" registrars="https://federation.renater.fr/"/>
> 
> Best,
> -peter
> -- 
> For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 2241 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/users/attachments/20210426/b3806170/attachment.p7s>