<html><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">Mike,<div><br></div><div>You're treating a string-like eduPersonTargetedID as a scoped eduPersonTargetedID. This is understandable given ample early confusion about how to express the concept behind eduPersonTargetedID and whether it should be scoped.</div><div><br></div><div><a href="https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPTargetedID">https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPTargetedID</a></div><div><br></div><div>Do a word search for "botch" for the entire sordid story.</div><div><br></div><div>You should find a log message in shibd.log about the attribute being discarded because no valid scope was obtained.</div><div><br></div><div>The most expedient fix in your case would be to change the attribute decoder to a simple attribute decoder, and edit attribute-filter.xml to remove the scoping check.</div><div><br></div><div><!--</div><div><div> <<a href="afp:AttributeRule">afp:AttributeRule</a> attributeID="targeted-id"></div><div> <<a href="afp:PermitValueRuleReference">afp:PermitValueRuleReference</a> ref="ScopingRules"/></div><div> </<a href="afp:AttributeRule">afp:AttributeRule</a>></div></div><div>--></div><div><br></div><div>Hope I've got this right,</div><div>Nate.</div><div><br></div><div><div><div>On Sep 26, 2012, at 13:26 , Mike Flynn wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><span class="Apple-style-span" style="font-family: arial, helvetica, sans-serif; font-size: 16px; ">What am I doing wrong that prevents this from passing?</span></blockquote></div><br></div></body></html>