Issue with upgrade 3.3 to 4.1 no attributes released

[Cantor, Scott]

On 11/10/21, 3:31 PM, "users on behalf of Powell, Keith A" <users-bounces at shibboleth.net on behalf of PowellKeithA at uams.edu> wrote:

>    I will say the issue is not with CAS specifically. Basically we cannot finish the authentication to any endpoint. 

Authentication in the IdP is quite distinct from attributes. If you generate a valid SAML response, the IdP is essentially working. The rest is about attributes and that's logged in some detail.

> Each tested end point says the IDP is not sending attributes after the move from 3.4.8 to 4.0.

Then the log should say why very explicitly. Either they're not resolved or they're filtered out.

And you cannot ignore explicit errors long before you ever get that far about basic subsystems not even starting up. My guess is the resolver or filter services aren't even live and are simply doing nothing because of that.

-- Scott