<div dir="ltr">You haven't shown us a line from the log showing evaluation of whether the <span style="font-size:13px">Cayuse filter applies.</span><div><span style="font-size:13px">If it's there, is it active or inactive for the principal?</span><br><div><span style="font-size:13px">If Cayuse filter is not in the log in line with the other named filters, it isn't being processed. If </span><span style="font-size:13px">Cayuse is the last change you made to attribute-filter.xml, are you sure that updated config has been consumed? That will be indicated in the process log as well. </span></div></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Thu, Dec 18, 2014 at 11:25 AM, Cantor, Scott <span dir="ltr"><<a href="mailto:cantor.2@osu.edu" target="_blank">cantor.2@osu.edu</a>></span> wrote:<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span class="">On 12/18/14, 8:11 PM, "Kidd, Don" <<a href="mailto:dkidd@miamioh.edu">dkidd@miamioh.edu</a>> wrote:<br>
<br>
>I see it in the audit log...<br>
<br>
</span>Then barring all of us overlooking a typo, refer to my original answer,<br>
because that is the fact of the matter.<br>
<br>
The policy you posted would be used. So it's not the policy you're running<br>
with.<br>
<span class="HOEnZb"><font color="#888888"><br>
-- Scott<br>
</font></span><div class="HOEnZb"><div class="h5"><br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
</div></div></blockquote></div></div>