Followup to previous question about Shibboleth 5.1.4 Attribute Authority functionality

[Scott Cantor]

On list please.

> So now we have to figure out why Shibboleth didn't like the <Attribute> elements....

Because you gave it no rules to apply to decode those constructs in XML into the names of IdPAttributes to match up with the data it's returning internally.

https://shibboleth.atlassian.net/wiki/spaces/IDP5/pages/3199510553/TranscodingRuleConfiguration

There is no way for an IdP to turn SAML naming, which is extremely arbitrary, into "mail" or "displayName", without being instructed how to do that, and the only rules the IdP ships with are the ones that follow the standard.

-- Scott