I went ahead and added 'displayName' to be released by my IdP (attribute-filter.xml) and recieved by my SP (attribute-map.xml)... but results are the same... my idp-process.log looks like its sending it, but my SP isn't receiving it. So i must be missing some other crucial thing as I don't think its related to eppn being scoped. And yes, my IdP's metadata has the <shibmd:Scope/> statement in it.<br>
<br>any suggestions on something more fundamental i may be missing?<br><br>-Rob<br><br><br><br><div class="gmail_quote">On Fri, May 10, 2013 at 12:08 PM, Rod Widdowson <span dir="ltr"><<a href="mailto:rdw@steadingsoftware.com" target="_blank">rdw@steadingsoftware.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Are you getting non scoped attributes? If so, it might be that the<br>
attribute value is being dropped by the code which checks the scope against<br>
the metadata. I would expect to see evidence of this in the shibd.log<br>
<br>
Does the metadata for your IdP (on your SP) have the required<br>
<shibmd:Scope/> statements in it?<br>
<br>
Rod<br>
<br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
</blockquote></div><br><br clear="all"><br>-- <br><div>Robert W. Gorrell<br>Middleware Engineer, Identity and Access Management</div>
<div>University of NC at Greensboro<br>336-334-5954</div>