Shib 4.0.1, repeated attributes in SAML assertions

[Christopher Bongaarts]

On 2/19/2021 3:57 PM, Jeffrey Williams via users wrote:
> An issue has cropped up in our dev environment where certain 
> attributes are being asserted twice in outgoing SAML assertions.  The 
> debug logs seem to indicate that the attributes in question are 
> resolving with the expected values and go through deduplication as one 
> would expect.
>
> However, the outgoing SAML assertion is logged and sent with certain 
> attributes having duplicate entries.  It seems to be the same 
> attributes each time.

Usual cause of this would be the new Attribute Registry feature in 4.0 
and the old AttributeEncoder in attribute-resolver.xml causing the 
multiple encodings.  Check the General Configuration section on:

https://wiki.shibboleth.net/confluence/display/IDP4/AttributeRegistryConfiguration

to see where to start looking...

-- 
%%  Christopher A. Bongaarts   %%  cab at umn.edu          %%
%%  OIT - Identity Management  %%  http://umn.edu/~cab  %%
%%  University of Minnesota    %%  +1 (612) 625-1809    %%