postAuthenticationFlows issue

[Rod Widdowson]

> Is the "Attribute 'YYYYY' not found in context" error because my "<bean class" syntax is not correct when the attribute is multi-valued?

No.  The failure you quote happens before the number of values is important (unless no values were returned).  I'd SWAG that the attribute just hasn't been resolved at that stage.  I'm no expert but perhaps the "resolutionPhases" differ?

A second order this to be aware of is that you are (going to be) giving ScopedAttributeValues to the RegexpPredicate.  This is a bit weird in  that (because of history) the predicate will only look at the value-without-the-scope bit of the Attribute value.  So when given foo at bar.example it will only consider "foo".  In other words use your "eduPersonAffiliation" attribute rather that EpSA.

In any case you should look further up (and down) in the log for when "sn" and "eduPersonAffiliation" are resolved and what values they get given during resolution.

Rod