Just to finish off the thread, I also needed this: p:attributeContextLookupStrategy-ref="shibboleth.ChildLookup.PreRequestedAttributeContext" in my attribute checking bean, which I missed at first.