<html><body><div style="color:#000; background-color:#fff; font-family:arial, helvetica, sans-serif;font-size:12pt"><div style="font-family: arial, helvetica, sans-serif;">I get this attribute from lots of Idps and it works fine. I just hooked up another Idp that wants to pass unscoped affiliation. This is what is in the assertion:</div><div style="font-family: arial, helvetica, sans-serif;"><br></div><pre style="font-family: arial, helvetica, sans-serif; white-space: pre-wrap; color: rgb(34, 34, 34);"><font color="#000000" style="background-color: rgb(255, 255, 255);"> <saml2:AttributeStatement>
<saml2:Attribute Name="urn:oid:1.3.6.1.4.1.<wbr>5923.1.1.1.1"
NameFormat="urn:oasis:names:<wbr>tc:SAML:2.0:attrname-format:<wbr>uri"
>
<saml2:AttributeValue xmlns:xs="<a href="http://www.w3.org/2001/XMLSchema" target="_blank" style="color: rgb(17, 85, 204);">http://www.w3.org/<wbr>2001/XMLSchema</a>"
xmlns:xsi="<a href="http://www.w3.org/2001/XMLSchema-instance" target="_blank" style="color: rgb(17, 85, 204);">http://www.w3.org/<wbr>2001/XMLSchema-instance</a>"
xsi:type="xs:string"
>Department</saml2:<wbr>AttributeValue>
</saml2:Attribute>
</saml2:AttributeStatement></font></pre><pre style="font-family: arial, helvetica, sans-serif; white-space: pre-wrap;"><br></pre><pre style="font-family: arial, helvetica, sans-serif; white-space: pre-wrap;">Here is mail from the same assertion and it passes just fine:</pre><pre style="font-family: arial, helvetica, sans-serif; white-space: pre-wrap;">
<saml2:AttributeStatement>
<saml2:Attribute FriendlyName="mail"
Name="urn:oid:0.9.2342.<wbr><span style="color: rgb(34, 34, 34);">19200300.100.1.3"
NameFormat="urn:oasis:names:</span><wbr><span style="color: rgb(34, 34, 34);">tc:SAML:2.0:attrname-format:</span><wbr><span style="color: rgb(34, 34, 34);">uri"
>
<saml2:AttributeValue xmlns:xs="</span><a href="http://www.w3.org/2001/XMLSchema" target="_blank" style="color: rgb(17, 85, 204);">http://www.w3.org/<wbr>2001/XMLSchema</a><span style="color: rgb(34, 34, 34);">"
xmlns:xsi="</span><a href="http://www.w3.org/2001/XMLSchema-instance" target="_blank" style="color: rgb(17, 85, 204);">http://www.w3.org/<wbr>2001/XMLSchema-instance</a><span style="color: rgb(34, 34, 34);">"
xsi:type="xs:string"
></span><a href="mailto:unknown@saasid.com" target="_blank" style="color: rgb(17, 85, 204);">someuser@someschool.com</a><span style="color: rgb(34, 34, 34);"></saml2:</span><wbr><span style="color: rgb(34, 34, 34);">AttributeValue>
</saml2:Attribute>
</saml2:AttributeStatement></span></pre><pre style="white-space: pre-wrap;"><span style="font-family: arial, helvetica, sans-serif;"><span style="color: rgb(34, 34, 34);">URN and nameFormat are correct - Data looks fine... </span><span style="color: rgb(34, 34, 34); font-size: 12pt;">The only difference I can see is friendlyName is missing. </span><span style="color: rgb(34, 34, 34); font-size: 12pt;">But that should not make a difference, should it?</span></span></pre></div></body></html>