<html><head><meta http-equiv="Content-Type" content="text/html charset=windows-1252"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;"><div><br></div><div>Here’s the filter policy</div><div><br></div><div><div style="margin: 0px; font-size: 11px; font-family: Menlo; color: rgb(37, 178, 191); background-color: rgb(254, 244, 156);"><AttributeFilterPolicy <span style="color: #27b41c">id</span><span style="color: #000000">=</span><span style="color: #bc321c">"releaseToOrigami"</span>></div><div style="margin: 0px; font-size: 11px; font-family: Menlo; color: rgb(37, 178, 191); background-color: rgb(254, 244, 156);"><span style="color: #000000"> </span><PolicyRequirementRule <span style="color: #27b41c">xsi</span><span style="color: #4d2cdc">:</span><span style="color: #27b41c">type</span><span style="color: #000000">=</span><span style="color: #bc321c">"basic:OR"</span>></div><div style="margin: 0px; font-size: 11px; font-family: Menlo; color: rgb(188, 50, 28); background-color: rgb(254, 244, 156);"><span style="color: #000000"> </span><span style="color: #25b2bf"><</span><span style="color: #ce33cc">basic</span><span style="color: #4d2cdc">:</span><span style="color: #25b2bf">Rule </span><span style="color: #27b41c">xsi</span><span style="color: #4d2cdc">:</span><span style="color: #27b41c">type</span><span style="color: #000000">=</span>"basic:AttributeRequesterString"<span style="color: #25b2bf"> </span><span style="color: #27b41c">value</span><span style="color: #000000">=</span>"<a href="https://demo">https://demo</a>.<span style="color: #991200; background-color: #e6e600">origami</span><a href="http://risk.com/Origami/SSO/SamlLogin?providerAccount=UofAK">risk.com/Origami/SSO/SamlLogin?providerAccount=UofAK</a>"<span style="color: #25b2bf"> /></span></div><div style="margin: 0px; font-size: 11px; font-family: Menlo; color: rgb(188, 50, 28); background-color: rgb(254, 244, 156);"><span style="color: #000000"> </span><span style="color: #25b2bf"><</span><span style="color: #ce33cc">basic</span><span style="color: #4d2cdc">:</span><span style="color: #25b2bf">Rule </span><span style="color: #27b41c">xsi</span><span style="color: #4d2cdc">:</span><span style="color: #27b41c">type</span><span style="color: #000000">=</span>"basic:AttributeRequesterString"<span style="color: #25b2bf"> </span><span style="color: #27b41c">value</span><span style="color: #000000">=</span>"<a href="https://live">https://live</a>.<span style="color: #991200; background-color: #e6e600">origami</span><a href="http://risk.com/Origami/SSO/SamlLogin?providerAccount=UofAK">risk.com/Origami/SSO/SamlLogin?providerAccount=UofAK</a>"<span style="color: #25b2bf"> /></span></div><div style="margin: 0px; font-size: 11px; font-family: Menlo; color: rgb(37, 178, 191); background-color: rgb(254, 244, 156);"><span style="color: #000000"> </span></PolicyRequirementRule></div><div style="margin: 0px; font-size: 11px; font-family: Menlo; color: rgb(37, 178, 191); background-color: rgb(254, 244, 156);"><span style="color: #000000"> </span><AttributeRule <span style="color: #27b41c">attributeID</span><span style="color: #000000">=</span><span style="color: #bc321c">"bannerID"</span>></div><div style="margin: 0px; font-size: 11px; font-family: Menlo; color: rgb(37, 178, 191); background-color: rgb(254, 244, 156);"><span style="color: #000000"> </span><PermitValueRule <span style="color: #27b41c">xsi</span><span style="color: #4d2cdc">:</span><span style="color: #27b41c">type</span><span style="color: #000000">=</span><span style="color: #bc321c">"basic:ANY"</span> /></div><div style="margin: 0px; font-size: 11px; font-family: Menlo; color: rgb(37, 178, 191); background-color: rgb(254, 244, 156);"><span style="color: #000000"> </span></AttributeRule></div><div style="margin: 0px; font-size: 11px; font-family: Menlo; color: rgb(37, 178, 191); background-color: rgb(254, 244, 156);"><span style="color: #000000"> </span><AttributeRule <span style="color: #27b41c">attributeID</span><span style="color: #000000">=</span><span style="color: #bc321c">"displayname"</span>></div><div style="margin: 0px; font-size: 11px; font-family: Menlo; color: rgb(37, 178, 191); background-color: rgb(254, 244, 156);"><span style="color: #000000"> </span><PermitValueRule <span style="color: #27b41c">xsi</span><span style="color: #4d2cdc">:</span><span style="color: #27b41c">type</span><span style="color: #000000">=</span><span style="color: #bc321c">"basic:ANY"</span> /></div><div style="margin: 0px; font-size: 11px; font-family: Menlo; color: rgb(37, 178, 191); background-color: rgb(254, 244, 156);"><span style="color: #000000"> </span></AttributeRule></div><div style="margin: 0px; font-size: 11px; font-family: Menlo; color: rgb(37, 178, 191); background-color: rgb(254, 244, 156);"><span style="color: #000000"> </span><AttributeRule <span style="color: #27b41c">attributeID</span><span style="color: #000000">=</span><span style="color: #bc321c">"email"</span>></div><div style="margin: 0px; font-size: 11px; font-family: Menlo; color: rgb(37, 178, 191); background-color: rgb(254, 244, 156);"><span style="color: #000000"> </span><PermitValueRule <span style="color: #27b41c">xsi</span><span style="color: #4d2cdc">:</span><span style="color: #27b41c">type</span><span style="color: #000000">=</span><span style="color: #bc321c">"basic:ANY"</span> /></div><div style="margin: 0px; font-size: 11px; font-family: Menlo; color: rgb(37, 178, 191); background-color: rgb(254, 244, 156);"><span style="color: #000000"> </span></AttributeRule></div><div style="margin: 0px; font-size: 11px; font-family: Menlo; color: rgb(37, 178, 191); background-color: rgb(254, 244, 156);"></AttributeFilterPolicy></div><div style="margin: 0px; font-size: 11px; font-family: Menlo; background-color: rgb(254, 244, 156); min-height: 13px;"><br></div><div style="margin: 0px; font-size: 11px; font-family: Menlo; background-color: rgb(254, 244, 156); min-height: 13px;">the incoming authN request</div><div style="margin: 0px; font-size: 11px; font-family: Menlo; background-color: rgb(254, 244, 156); min-height: 13px;"><br></div><div style="margin: 0px; font-family: Courier; color: rgb(76, 47, 45); background-color: rgb(223, 219, 196);">11:19:32.828 - DEBUG [PROTOCOL_MESSAGE:113] - </div><div style="margin: 0px; font-family: Courier; color: rgb(76, 47, 45); background-color: rgb(223, 219, 196);"><?xml version="1.0" encoding="UTF-8"?><samlp:AuthnRequest xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" AssertionConsumerServiceURL="<a href="https://demo.origamirisk.com/Origami/SSO/SamlLogin?providerAccount=UofAK">https://demo.origamirisk.com/Origami/SSO/SamlLogin?providerAccount=UofAK</a>" Destination="<a href="https://idp.alaska.edu/idp/profile/SAML2/POST/SSO">https://idp.alaska.edu/idp/profile/SAML2/POST/SSO</a>" ForceAuthn="false" ID="_4C0655ABBA69A0F151CBA60B2BF32CF4" IsPassive="false" IssueInstant="2014-02-11T20:19:38Z" ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Version="2.0"></div><div style="margin: 0px; font-family: Courier; color: rgb(76, 47, 45); background-color: rgb(223, 219, 196);"> <saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion"><a href="https://demo.origamirisk.com</saml:Issuer>">https://demo.origamirisk.com</saml:Issuer></a></div><div style="margin: 0px; font-family: Courier; color: rgb(76, 47, 45); background-color: rgb(223, 219, 196);"> <samlp:NameIDPolicy AllowCreate="true"/></div><div style="margin: 0px; font-family: Courier; color: rgb(76, 47, 45); background-color: rgb(223, 219, 196);"></samlp:AuthnRequest></div><div style="margin: 0px; font-family: Courier; color: rgb(76, 47, 45); background-color: rgb(223, 219, 196); min-height: 14px;"><br></div><div style="margin: 0px; font-size: 11px; font-family: Menlo; background-color: rgb(254, 244, 156);">…</div><div style="margin: 0px; font-size: 11px; font-family: Menlo; background-color: rgb(254, 244, 156);"><br></div><div style="margin: 0px; font-size: 11px; font-family: Menlo; background-color: rgb(254, 244, 156);">but IdP reports it is not active for this request</div><div style="margin: 0px; font-size: 11px; font-family: Menlo; background-color: rgb(254, 244, 156);"><br></div><div style="margin: 0px; font-family: Courier; color: rgb(76, 47, 45); background-color: rgb(223, 219, 196); position: static; z-index: auto;">11:19:46.595 - DEBUG [edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:130] - Evaluating if filter policy releaseToOrigami is active for principal dabantz</div><div style="margin: 0px; font-family: Courier; color: rgb(76, 47, 45); background-color: rgb(223, 219, 196);">11:19:46.596 - DEBUG [edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:134] - Filter policy releaseToOrigami is not active for principal dabantz</div><div style="margin: 0px; font-family: Courier; color: rgb(76, 47, 45); background-color: rgb(223, 219, 196);">…</div><div style="margin: 0px; font-family: Courier; color: rgb(76, 47, 45); background-color: rgb(223, 219, 196); position: static; z-index: auto;"><div style="margin: 0px;">11:19:46.607 - DEBUG [edu.internet2.middleware.shibboleth.common.attribute.provider.ShibbolethSAML2AttributeAuthority:128] - No attributes remained after encoding and filtering by value, no attribute statement built</div><div>...</div></div><div style="margin: 0px; font-family: Courier; color: rgb(76, 47, 45); background-color: rgb(223, 219, 196);">11:19:46.627 - DEBUG [PROTOCOL_MESSAGE:74] - </div><div style="margin: 0px; font-family: Courier; color: rgb(76, 47, 45); background-color: rgb(223, 219, 196);"><?xml version="1.0" encoding="UTF-8"?><saml2p:Response xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol" Destination="<a href="https://demo.origamirisk.com/Origami/SSO/SamlLogin?providerAccount=UofAK”">https://demo.origamirisk.com/Origami/SSO/SamlLogin?providerAccount=UofAK”</a>…</div></div><div><br></div><div>David Bantz</div></body></html>