<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-2">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">
Jozef,
<div><br>
</div>
<div>The attribute-policy.xml filtration system in the SP is not awesomely documented, but that PermitValueRule strikes me as probably wrong if you can't count on receiving NameIDQualifiers. You'll see that those differ in the successful and failed examples.
<div><br>
</div>
<div>
<div><a href="http://shibboleth.net/pipermail/users/2013-March/008749.html">http://shibboleth.net/pipermail/users/2013-March/008749.html</a></div>
<div><br>
</div>
<div>It's up to you whether to require the check and enforce it if so, but we can't really tell you that it is or is not important in your deployment.</div>
<div><br>
</div>
<div>Hope this helps,</div>
<div>Nate.</div>
<div><br>
<div>
<div>On Oct 30, 2014, at 8:50 AM, Jozef M. <<a href="mailto:vidiecan@gmail.com">vidiecan@gmail.com</a>> wrote:</div>
<br class="Apple-interchange-newline">
<blockquote type="cite">
<div>from attribute-policy.xml<br>
</div>
<div><br>
</div>
<div>
<div style="color: rgb(34, 34, 34); font-family: arial; font-size: small; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255);">
<afp:AttributeRule attributeID="persistent-id"></div>
<div style="color: rgb(34, 34, 34); font-family: arial; font-size: small; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255);">
<afp:PermitValueRule xsi:type="saml:NameIDQualifierString"/></div>
<div style="color: rgb(34, 34, 34); font-family: arial; font-size: small; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255);">
</afp:AttributeRule></div>
<br class="Apple-interchange-newline">
</div>
</blockquote>
</div>
<br>
</div>
</div>
</div>
</body>
</html>