<html><body><div style="color:#000; background-color:#fff; font-family:arial, helvetica, sans-serif;font-size:12pt"><div><span>Thanks. Yeah it went away after they started passing attributes.</span></div><div><br></div> <div style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"> <div style="font-family: 'times new roman', 'new york', times, serif; font-size: 12pt;"> <div dir="ltr"> <hr size="1"> <font size="2" face="Arial"> <b><span style="font-weight:bold;">From:</span></b> "Cantor, Scott" <cantor.2@osu.edu><br> <b><span style="font-weight: bold;">To:</span></b> Shib Users <users@shibboleth.net> <br> <b><span style="font-weight: bold;">Sent:</span></b> Thursday, September 19, 2013 10:05 AM<br> <b><span style="font-weight: bold;">Subject:</span></b> Re: no AttributeAuthority role found in metadata<br> </font> </div> <div class="y_msg_container"><br>On 9/19/13 12:45 PM, "Tom Scavo" <<a
ymailto="mailto:trscavo@internet2.edu" href="mailto:trscavo@internet2.edu">trscavo@internet2.edu</a>> wrote:<br><br>>On Thu, Sep 19, 2013 at 12:26 PM, Mike Flynn <<a ymailto="mailto:shibbolethlynda@yahoo.com" href="mailto:shibbolethlynda@yahoo.com">shibbolethlynda@yahoo.com</a>><br>>wrote:<br>>> Setting up a new connection, everything works fine but I see this in the<br>>> logs:<br>>><br>>> WARN Shibboleth.AttributeResolver.Query [15]: no SAML 2<br>>>AttributeAuthority<br>>> role found in metadata<br>>><br>>> Do I need to worry about that?<br>><br>>This is becoming a "recommended practice" in the InCommon Federation.<br>>If an IdP *always* pushes attributes, then a SAML2 AttributeService<br>>endpoint is not necessary. Indeed, such an endpoint is known to cause<br>>spurious errors at the SP. (I'm not referring to the warning above.)<br><br>That would be another spurious warning
because no attributes were pushed,<br>but ultimately there's no way to prevent something from being logged<br>unless the SP just disables queries.<br><br>The warning is less noticeable than the errors would be.<br><br>-- Scott<br><br><br>--<br>To unsubscribe from this list send an email to <a ymailto="mailto:users-unsubscribe@shibboleth.net" href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br><br><br></div> </div> </div> </div></body></html>