<html><head><style>body{font-family:Helvetica,Arial;font-size:13px}</style></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;"><div id="bloop_customfont" style="font-family:Helvetica,Arial;font-size:13px; color: rgba(0,0,0,1.0); margin: 0px; line-height: auto;">Thanks for the verification.</div><div id="bloop_customfont" style="font-family:Helvetica,Arial;font-size:13px; color: rgba(0,0,0,1.0); margin: 0px; line-height: auto;"><br></div><div id="bloop_customfont" style="font-family:Helvetica,Arial;font-size:13px; color: rgba(0,0,0,1.0); margin: 0px; line-height: auto;">One thing to note for posterity: expect collisions if you use a regex for the policy requirement rules on CAS services. It’s very likely that something like `^<a href="https://.*%5C.somegreatuniversity%5C.edu/.*%60">https://.*\.somegreatuniversity\.edu/.*`</a>, for instance, is going to match some SAML SPs as well. So, depending upon your rules, you could get some unexpected behavior.</div><div id="bloop_customfont" style="font-family:Helvetica,Arial;font-size:13px; color: rgba(0,0,0,1.0); margin: 0px; line-height: auto;"><br></div><div id="bloop_customfont" style="font-family:Helvetica,Arial;font-size:13px; color: rgba(0,0,0,1.0); margin: 0px; line-height: auto;">Thanks again, and look forward to 3.2.</div> <br> <div id="bloop_sign_1439562168952193024" class="bloop_sign"><div style="font-family:helvetica,arial;font-size:13px">-Jj</div></div> <br><p class="airmail_on" style="color:#000;">On August 14, 2015 at 08:35:15, Marvin Addison (<a href="mailto:marvin.addison@gmail.com">marvin.addison@gmail.com</a>) wrote:</p> <blockquote type="cite" class="clean_bq"><span><div><div></div><div>
<title></title>
<div dir="ltr">
<div class="gmail_quote">
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
<div style="word-wrap:break-word">
<div style="font-family:Helvetica,Arial;font-size:13px;color:rgb(0,0,0);margin:0px">
Marvin, can you verify what version of Shibboleth you are
using?</div>
</div>
</blockquote>
<div><br></div>
<div>I am using a recent 3.2.0 snapshot.</div>
<div> </div>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
<div style="word-wrap:break-word">
<div style="font-family:Helvetica,Arial;font-size:13px;color:rgb(0,0,0);margin:0px">
I remember doing something like this a while back, but when I go to
do the same in 3.1.2, the attributes are not returning.</div>
</div>
</blockquote>
<div><br></div>
<div>I attempted to reproduce in 3.1.2 and confirmed the behavior
you cited, and in the process recalled there was a bug for this
that has been fixed for 3.2.0:</div>
<div><br></div>
<div><a href="https://issues.shibboleth.net/jira/browse/IDP-762">https://issues.shibboleth.net/jira/browse/IDP-762</a><br>
</div>
<div><br></div>
<div>So unfortunately group-based filtering won't work in 3.1.2 as
you stated. Using a regex filter like Walter suggested should
suffice as an alternative until 3.2.0 is released.</div>
<div><br></div>
<div>M</div>
<div><br></div>
</div>
</div>
</div></div></span></blockquote></body></html>