Shib IdP Proxying to another IdP help

[Cantor, Scott]

Generally speaking, the answer is going to be in your logs. If it's relaying the client back to the SP and the issue is just that the attributes are missing, then most likely they're being filtered out (so your policy is incorrect in some way and it should log that they're being filtered out) or you don't have decoding rules for the attribute names that are passing into the IdP from the other IdP because it isn't using standard naming or there are custom attributes involved (which should also be logged).

That is also not the documentation. The docs cover what you have to do, and they're written by the author. How Tos are (usually) not and are rarely up to date. They're fine as a supplement, they're never the right starting point.

4.0 is of course also EOL, and there are some improvements to configuring proxying support in 4.1.

-- Scott