<html><head><meta http-equiv="Content-Type" content="text/html charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">A service wants a URL provided in the SAML assertion from our IdP.<div>It's the same value for everyone in our domain. I thought I faithfully </div><div>transliterated a resolver fragment from the documentation, but the </div><div>attribute is not in the outgoing SAML assertion. </div><div><br></div><div><br></div><div><br></div><div>resolver fragment:</div><div><span style="background-color: rgb(255, 255, 255); "><!-- logout URL for BBC --></span><br><span style="background-color: rgb(255, 255, 255); "> <resolver:DataConnector id="staticValueAttributes" xsi:type="Static" xmlns="urn:mace:shibboleth:2.0:resolver:dc"></span><br><span style="background-color: rgb(255, 255, 255); "> <Attribute id="LogoutURL"></span><br><span style="background-color: rgb(255, 255, 255); "> <Value></span><a class="moz-txt-link-freetext" href="https://www.alaska.edu/risksafety/alerts/">https://www.alaska.edu/risksafety/alerts/</a><span style="background-color: rgb(255, 255, 255); "></Value></span><br><span style="background-color: rgb(255, 255, 255); "> </Attribute></span><br><span style="background-color: rgb(255, 255, 255); "> </resolver:DataConnector></span></div><div><span style="background-color: rgb(255, 255, 255); "><br></span></div><div><span style="background-color: rgb(255, 255, 255); ">attribute filter:</span></div><div><span style="background-color: rgb(255, 255, 255); "><AttributeFilterPolicy id="releaseToBBConnect"></span><br><span style="background-color: rgb(255, 255, 255); "><PolicyRequirementRule xsi:type="basic:OR"></span><br><span style="background-color: rgb(255, 255, 255); "> <basic:Rule xsi:type="basic:AttributeRequesterString" value=</span><a class="moz-txt-link-rfc2396E" href="https://sso.blackboardconnect.com/SAML/Portal/E0D069C2563D4D63A14CBB95D6845C25">"https://sso.blackboardconnect.com/SAML/Portal/E0D069C2563D4D63A14CBB95D6845C25"</a><span style="background-color: rgb(255, 255, 255); "> /></span><br><span style="background-color: rgb(255, 255, 255); "> <basic:Rule xsi:type="basic:AttributeRequesterString" value=</span><a class="moz-txt-link-rfc2396E" href="https://sso.blackboardconnect.com/SAML/Connect/9F95200F70EB4E8F844320653CCD97A8">"https://sso.blackboardconnect.com/SAML/Connect/9F95200F70EB4E8F844320653CCD97A8"</a><span style="background-color: rgb(255, 255, 255); "> /></span><br><span style="background-color: rgb(255, 255, 255); "> <basic:Rule xsi:type="basic:AttributeRequesterString" value=</span><a class="moz-txt-link-rfc2396E" href="https://ssostg.blackboardconnect.com/SAML/Connect/B46C75BF139144349190F775C38F05A9">"https://ssostg.blackboardconnect.com/SAML/Connect/B46C75BF139144349190F775C38F05A9"</a><span style="background-color: rgb(255, 255, 255); "> /></span><br><span style="background-color: rgb(255, 255, 255); "></PolicyRequirementRule></span><br><span style="background-color: rgb(255, 255, 255); "> <AttributeRule attributeID="BBConnectFedID"></span><br><span style="background-color: rgb(255, 255, 255); "> <PermitValueRule xsi:type="basic:ANY" /></span><br><span style="background-color: rgb(255, 255, 255); "> </AttributeRule></span><br><span style="background-color: rgb(255, 255, 255); "> <AttributeRule attributeID="bannerid"></span><br><span style="background-color: rgb(255, 255, 255); "> <PermitValueRule xsi:type="basic:ANY" /></span><br><span style="background-color: rgb(255, 255, 255); "> </AttributeRule></span><br><span style="background-color: rgb(255, 255, 255); "> <AttributeRule attributeID="FirstName"></span><br><span style="background-color: rgb(255, 255, 255); "> <PermitValueRule xsi:type="basic:ANY" /></span><br><span style="background-color: rgb(255, 255, 255); "> </AttributeRule></span><br><span style="background-color: rgb(255, 255, 255); "> <AttributeRule attributeID="LastName"></span><br><span style="background-color: rgb(255, 255, 255); "> <PermitValueRule xsi:type="basic:ANY" /></span><br><span style="background-color: rgb(255, 255, 255); "> </AttributeRule></span><br><span style="background-color: rgb(255, 255, 255); "> <AttributeRule attributeID="ContactRefCode"></span><br><span style="background-color: rgb(255, 255, 255); "> <PermitValueRule xsi:type="basic:ANY" /></span><br><span style="background-color: rgb(255, 255, 255); "> </AttributeRule></span><br><span style="background-color: rgb(255, 255, 255); "> <AttributeRule attributeID="LogoutURL"></span><br><span style="background-color: rgb(255, 255, 255); "> <PermitValueRule xsi:type="basic:ANY" /></span><br><span style="background-color: rgb(255, 255, 255); "> </AttributeRule></span><br><span style="background-color: rgb(255, 255, 255); "></AttributeFilterPolicy></span></div><div><span style="background-color: rgb(255, 255, 255); "><br></span></div><div><span style="background-color: rgb(255, 255, 255); ">debug log contains </span></div><div><span style="background-color: rgb(255, 255, 255); ">14:29:45.748 - DEBUG [edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:128</span><br><span style="background-color: rgb(255, 255, 255); ">] - Evaluating if filter policy releaseToBBConnect is active for principal anautiyal</span><br><span style="background-color: rgb(255, 255, 255); ">14:29:45.748 - DEBUG [edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:137</span><br><span style="background-color: rgb(255, 255, 255); ">] - Filter policy releaseToBBConnect is active for principal anautiyal</span><br><span style="background-color: rgb(255, 255, 255); ">14:29:45.748 - DEBUG [edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:162</span><br><span style="background-color: rgb(255, 255, 255); ">] - Processing permit value rule for attribute BBConnectFedID for principal anautiyal</span><br><span style="background-color: rgb(255, 255, 255); ">14:29:45.748 - DEBUG [edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:162</span><br><span style="background-color: rgb(255, 255, 255); ">] - Processing permit value rule for attribute bannerid for principal anautiyal</span><br><span style="background-color: rgb(255, 255, 255); ">14:29:45.748 - DEBUG [edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:162</span><br><span style="background-color: rgb(255, 255, 255); ">] - Processing permit value rule for attribute FirstName for principal anautiyal</span><br><span style="background-color: rgb(255, 255, 255); ">14:29:45.748 - DEBUG [edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:162</span><br><span style="background-color: rgb(255, 255, 255); ">] - Processing permit value rule for attribute LastName for principal anautiyal</span><br><span style="background-color: rgb(255, 255, 255); ">14:29:45.749 - DEBUG [edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:162</span><br><span style="background-color: rgb(255, 255, 255); ">] - Processing permit value rule for attribute ContactRefCode for principal </span>nautical</div><div><br><span style="background-color: rgb(255, 255, 255); ">14:29:45.749 - DEBUG [edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:162</span><br><span style="background-color: rgb(255, 255, 255); ">] - Processing permit value rule for attribute <b>LogoutURL</b> for principal </span>nautical</div><div><br><span style="background-color: rgb(255, 255, 255); ">14:29:45.749 - DEBUG [edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:128</span><br><span style="background-color: rgb(255, 255, 255); ">] - Evaluating if filter policy releaseToKualiReady is active for principal anautiyal</span><br><span style="background-color: rgb(255, 255, 255); ">14:29:45.749 - DEBUG [edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:132</span><br><span style="background-color: rgb(255, 255, 255); ">] - Filter policy releaseToKualiReady is not active for principal anautiyal</span><br><span style="background-color: rgb(255, 255, 255); ">14:29:45.749 - DEBUG [edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:128</span><br><span style="background-color: rgb(255, 255, 255); ">] - Evaluating if filter policy releaseToFaculty180 is active for principal anautiyal</span></div></body></html>