Getting IdP attributes from proxy IdP

[Cantor, Scott]

> It's not running any flows; it can't find one that supports that
> AuthnContext. I'm pretty sure that implies that my list of
> supportedPrincipals from authn.properties is either not being used or I've
> typoed something. 

Could be legacy issues if you haven't migrated to all of the new syntaxes, you can't combine approaches there. The flow descriptors from pre-4.1 days will totally supplant what the properties do (i.e. you'd have to remove them or use the XML syntax to add the supportedPrincipals setting).

The other common mistake is missing commas, it's really easy because of that multi-line mess to overlook them not being there. The syntax is bad, but it was about the only way to make it work without XML.

e.g. idp.authn.MFA.supportedPrincipals = \
	saml2/something, \
	saml1/something \
	saml2/somethingelse

Looks fine but the last line won't be included correctly, the comma after the second one is missing.

Anyway, yes, that's a simpler problem in some sense, it's just not honorinig the supportedPrincipals expected.

-- Scott