<div dir="ltr"><div><div>Yes, it's a child element of IDPSSODescriptor. ( And, IDPSSODescriptor is the child element of EntityDescriptor )<br><br><EntityDescriptor entityID="<a href="https://myIDP/idp/shibboleth">https://myIDP/idp/shibboleth</a>"><br>
<IDPSSODescriptor errorURL="<a href="https://myIDP/identity/feedback.htm">https://myIDP/identity/feedback.htm</a>" protocolSupportEnumeration="urn:mace:shibboleth:1.0 urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol"><br>
<Extensions><br> <shibmd:Scope regexp="false"><a href="http://private.com">private.com</a></shibmd:Scope><br> <shibmd:Scope regexp="false"><a href="http://home.private.com">home.private.com</a></shibmd:Scope> <br>
</Extensions><br>....<br>....<br><br></div>And, I just tried with permitted value "member", no luck! <br><br></div>Regarding log: Are you pointing SP log? Because, in my IDP log, SAML assertion is showing that values are being passed... <br>
<br><br><div><div><br></div></div></div><div class="gmail_extra"><br><br><div class="gmail_quote">On Thu, Feb 20, 2014 at 9:54 AM, Peter Schober <span dir="ltr"><<a href="mailto:peter.schober@univie.ac.at" target="_blank">peter.schober@univie.ac.at</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class="">* Zico <<a href="mailto:mailzico@gmail.com">mailzico@gmail.com</a>> [2014-02-20 16:39]:<br>
</div><div class="">> Thanks for your tip, Peter. I made the changes in my IDP metadata with<br>
> multiple shibdmd:Scopes ( ** ). But, still nothing changing...<br>
><br>
</div>> *<Extensions> <shibmd:Scope regexp="false"><a href="http://private.com" target="_blank">private.com</a><br>
> <<a href="http://private.com" target="_blank">http://private.com</a>></shibmd:Scope> <shibmd:Scope<br>
> regexp="false"><a href="http://home.private.com" target="_blank">home.private.com</a> <<a href="http://home.private.com" target="_blank">http://home.private.com</a>></shibmd:Scope><br>
> </Extensions>*<br>
<br>
Just in case: Make sure the it's a child element of<br>
IDPSSODescriptor/Extensions (not EntityDescriptor/Extensions).<br>
>From the snippet above it's impossible to tell.<br>
<div class="HOEnZb"><div class="h5">-peter<br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
</div></div></blockquote></div><br><br clear="all"><br>-- <br>Best,<br>Zico
</div>