<div dir="ltr"><br><div class="gmail_extra"><br><div class="gmail_quote">On Mon, Aug 17, 2015 at 1:11 PM, Andrew Morgan <span dir="ltr"><<a href="mailto:morgan@orst.edu" target="_blank">morgan@orst.edu</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span class="">On Mon, 17 Aug 2015, Michael Dahlberg wrote:<br>
<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
I'm continuing to have attribute release problems.  Maybe a second (or<br>
third) pair of eyes on my config will indicate my error.<br>
<br>
The relevant part of my attribute-filter.xml file is listed below:<br>
<br>
   <afp:AttributeFilterPolicy><br>
       <afp:PolicyRequirementRule xsi:type="basic:OR"><br>
           <basic:Rule xsi:type="basic:AttributeRequesterString" value="<br>
<a href="https://adminuat.dc4.pageuppeople.com/" rel="noreferrer" target="_blank">https://adminuat.dc4.pageuppeople.com/</a>" /><br>
           <basic:Rule xsi:type="basic:AttributeRequesterString" value="<br>
<a href="https://admin.dc4.pageuppeople.com/" rel="noreferrer" target="_blank">https://admin.dc4.pageuppeople.com/</a>" /><br>
       </afp:PolicyRequirementRule><br>
       <afp:AttributeRule attributeID="WindowsDomainQualifiedName"><br>
           <afp:PermitValueRule xsi:type="basic:ANY" /><br>
       </afp:AttributeRule><br>
   </afp:AttributeFilterPolicy><br>
</blockquote>
<br></span>
Doesn't each AttributeFilterPolicy need an id?<br>
<br>
  <a href="https://wiki.shibboleth.net/confluence/display/SHIB2/IdPAddAttributeFilter" rel="noreferrer" target="_blank">https://wiki.shibboleth.net/confluence/display/SHIB2/IdPAddAttributeFilter</a><br><div class="HOEnZb"><div class="h5"><br></div></div></blockquote><div><br></div><div>My guess is no.  That wiki page doesn't state that an id is mandatory and I've got my AttributeFilterPolicy's grouped together according to common SPs and none have an id tag ... although that could be one more thing I'm doing wrong.</div><div><br></div><div>Mike </div></div><br></div></div>