<html><body><div style="font-family: Arial; font-size: 10pt; color: #000000"><div>Thanks Tom (and Scott),</div><div><br data-mce-bogus="1"></div><div>We did write a custom attribute resolver (which may be causing the delay) - here is my attribute-filter.xml and attribute-resolver.xml config:</div><div><br data-mce-bogus="1"></div><div>Perhaps something may jump out!</div><div><br data-mce-bogus="1"></div><div>Kind Regards,</div><div>Gavin Jackson</div><div><br data-mce-bogus="1"></div><div><strong>attribute-filter.xml</strong></div><div><br data-mce-bogus="1"></div><div><?xml version="1.0" encoding="UTF-8"?><br><afp:AttributeFilterPolicyGroup id="ShibbolethFilterPolicy"<br> xmlns:afp="urn:mace:shibboleth:2.0:afp" xmlns:basic="urn:mace:shibboleth:2.0:afp:mf:basic" <br> xmlns:saml="urn:mace:shibboleth:2.0:afp:mf:saml" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" <br> xsi:schemaLocation="urn:mace:shibboleth:2.0:afp classpath:/schema/shibboleth-2.0-afp.xsd<br> urn:mace:shibboleth:2.0:afp:mf:basic classpath:/schema/shibboleth-2.0-afp-mf-basic.xsd<br> urn:mace:shibboleth:2.0:afp:mf:saml classpath:/schema/shibboleth-2.0-afp-mf-saml.xsd"><br><br> <!-- Release the transient ID to anyone --><br> <afp:AttributeFilterPolicy id="releaseTransientIdToAnyone"><br> <afp:PolicyRequirementRule xsi:type="basic:ANY"/><br><br> <afp:AttributeRule attributeID="transientId"><br> <afp:PermitValueRule xsi:type="basic:ANY"/><br> </afp:AttributeRule><br><br> </afp:AttributeFilterPolicy><br><br> <afp:AttributeFilterPolicy id="releaseToAnyone" ><br> <afp:PolicyRequirementRule xsi:type="basic:ANY"/><br> <br> <afp:AttributeRule attributeID="uid"><br> <afp:PermitValueRule xsi:type="basic:ANY" /><br> </afp:AttributeRule><br><br> <afp:AttributeRule attributeID="custid"><br> <afp:PermitValueRule xsi:type="basic:ANY" /><br> </afp:AttributeRule><br><br> <afp:AttributeRule attributeID="title"><br> <afp:PermitValueRule xsi:type="basic:ANY" /><br> </afp:AttributeRule><br><br> <afp:AttributeRule attributeID="email"><br> <afp:PermitValueRule xsi:type="basic:ANY" /><br> </afp:AttributeRule><br><br> <afp:AttributeRule attributeID="commonName"><br> <afp:PermitValueRule xsi:type="basic:ANY" /><br> </afp:AttributeRule><br><br> <afp:AttributeRule attributeID="surname"><br> <afp:PermitValueRule xsi:type="basic:ANY" /><br> </afp:AttributeRule><br><br> <afp:AttributeRule attributeID="givenName"><br> <afp:PermitValueRule xsi:type="basic:ANY" /><br> </afp:AttributeRule><br><br> <afp:AttributeRule attributeID="isMemberOf"><br> <afp:PermitValueRule xsi:type="basic:ANY" /><br> </afp:AttributeRule><br><br> <afp:AttributeRule attributeID="roleValidLogin"><br> <afp:PermitValueRule xsi:type="basic:ANY" /><br> </afp:AttributeRule><br><br> <afp:AttributeRule attributeID="roleIsPerson"><br> <afp:PermitValueRule xsi:type="basic:ANY" /><br> </afp:AttributeRule><br><br> <afp:AttributeRule attributeID="roleIsInstructor"><br> <afp:PermitValueRule xsi:type="basic:ANY" /><br> </afp:AttributeRule><br><br> <afp:AttributeRule attributeID="roleIsInstructorAssessor"><br> <afp:PermitValueRule xsi:type="basic:ANY" /><br> </afp:AttributeRule><br><br> <afp:AttributeRule attributeID="roleIsInstructorTrainer"><br> <afp:PermitValueRule xsi:type="basic:ANY" /><br> </afp:AttributeRule><br><br> <afp:AttributeRule attributeID="roleIsInstructorPresenter"><br> <afp:PermitValueRule xsi:type="basic:ANY" /><br> </afp:AttributeRule><br><br> <afp:AttributeRule attributeID="roleIsLicensee"><br> <afp:PermitValueRule xsi:type="basic:ANY" /><br> </afp:AttributeRule><br><br> <afp:AttributeRule attributeID="roleHasActiveContracts"><br> <afp:PermitValueRule xsi:type="basic:ANY" /><br> </afp:AttributeRule><br><br> <afp:AttributeRule attributeID="roleIsGELCandidate"><br> <afp:PermitValueRule xsi:type="basic:ANY" /><br> </afp:AttributeRule><br><br> <afp:AttributeRule attributeID="roleIsGELTrained"><br> <afp:PermitValueRule xsi:type="basic:ANY" /><br> </afp:AttributeRule><br><br> <!-- Salesforce attributes --><br> <afp:AttributeRule attributeID="sfdcUser"><br> <afp:PermitValueRule xsi:type="basic:ANY" /><br> </afp:AttributeRule><br><br> <afp:AttributeRule attributeID="User.IsActive"><br> <afp:PermitValueRule xsi:type="basic:ANY" /><br> </afp:AttributeRule><br><br> <afp:AttributeRule attributeID="portal_id"><br> <afp:PermitValueRule xsi:type="basic:ANY" /><br> </afp:AttributeRule><br><br> <afp:AttributeRule attributeID="organization_id"><br> <afp:PermitValueRule xsi:type="basic:ANY" /><br> </afp:AttributeRule><br><br> <afp:AttributeRule attributeID="siteurl"><br> <afp:PermitValueRule xsi:type="basic:ANY" /><br> </afp:AttributeRule><br><br> <afp:AttributeRule attributeID="lmisalesforceid"><br> <afp:PermitValueRule xsi:type="basic:ANY" /><br> </afp:AttributeRule><br><br> </afp:AttributeFilterPolicy><br><br></afp:AttributeFilterPolicyGroup><br></div><div><br data-mce-bogus="1"></div><div><strong>attribute-resolver.xml</strong></div><div><br data-mce-bogus="1"></div><div><?xml version="1.0" encoding="UTF-8"?><br><resolver:AttributeResolver xmlns:resolver="urn:mace:shibboleth:2.0:resolver" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" <br> xmlns:pc="urn:mace:shibboleth:2.0:resolver:pc" xmlns:ad="urn:mace:shibboleth:2.0:resolver:ad" <br> xmlns:dc="urn:mace:shibboleth:2.0:resolver:dc" xmlns:enc="urn:mace:shibboleth:2.0:attribute:encoder" <br> xmlns:sec="urn:mace:shibboleth:2.0:security" <br> xmlns:uid="urn:mace:lesmills.net.au:idp:resolver:dc"<br> xsi:schemaLocation="urn:mace:shibboleth:2.0:resolver classpath:/schema/shibboleth-2.0-attribute-resolver.xsd<br> urn:mace:shibboleth:2.0:resolver:pc classpath:/schema/shibboleth-2.0-attribute-resolver-pc.xsd<br> urn:mace:shibboleth:2.0:resolver:ad classpath:/schema/shibboleth-2.0-attribute-resolver-ad.xsd<br> urn:mace:shibboleth:2.0:resolver:dc classpath:/schema/shibboleth-2.0-attribute-resolver-dc.xsd<br> urn:mace:shibboleth:2.0:attribute:encoder classpath:/schema/shibboleth-2.0-attribute-encoder.xsd<br> urn:mace:shibboleth:2.0:security classpath:/schema/shibboleth-2.0-security.xsd<br> <strong>urn:mace:lesmills.net.au:idp:resolver:dc classpath:/schema/zenkai-connector.xsd</strong>"><br><br> <!-- ========================================== --><br> <!-- Attribute Definitions --><br> <!-- ========================================== --><br><br> <!-- Schema: Core schema attributes--><br> <br> <!-- Note that salesforce requires the uid to be encoded as unspecified --><br> <resolver:AttributeDefinition xsi:type="ad:Simple" id="uid" sourceAttributeID="uid"><br> <resolver:Dependency ref="zenkaiAttr" /><br> <resolver:AttributeEncoder xsi:type="SAML2StringNameID" xmlns="urn:mace:shibboleth:2.0:attribute:encoder" nameFormat="urn:oasis:names:tc:SAML:2.0:nameid-format:unspecified" /><br> </resolver:AttributeDefinition><br><br> <resolver:AttributeDefinition xsi:type="ad:Simple" id="custid" sourceAttributeID="uid"><br> <resolver:Dependency ref="zenkaiAttr"/><br> <resolver:AttributeEncoder xsi:type="enc:SAML2String" name="custid" friendlyName="custid" /><br> </resolver:AttributeDefinition><br><br> <resolver:AttributeDefinition xsi:type="ad:Simple" id="email" sourceAttributeID="mail"><br> <resolver:Dependency ref="zenkaiAttr" /><br> <resolver:AttributeEncoder xsi:type="enc:SAML2String" name="mail" friendlyName="mail" /><br> </resolver:AttributeDefinition><br><br> <resolver:AttributeDefinition xsi:type="ad:Simple" id="title" sourceAttributeID="title"><br> <resolver:Dependency ref="zenkaiAttr" /><br> <resolver:AttributeEncoder xsi:type="enc:SAML2String" name="title" friendlyName="title" /><br> </resolver:AttributeDefinition><br> <br> <resolver:AttributeDefinition xsi:type="ad:Simple" id="commonName" sourceAttributeID="cn"><br> <resolver:Dependency ref="zenkaiAttr" /><br> <resolver:AttributeEncoder xsi:type="enc:SAML2String" name="cn" friendlyName="cn" /><br> </resolver:AttributeDefinition><br><br> <resolver:AttributeDefinition xsi:type="ad:Simple" id="givenName" sourceAttributeID="fn"><br> <resolver:Dependency ref="zenkaiAttr" /><br> <resolver:AttributeEncoder xsi:type="enc:SAML2String" name="fn" friendlyName="givenName" /><br> </resolver:AttributeDefinition><br><br> <resolver:AttributeDefinition xsi:type="ad:Simple" id="surname" sourceAttributeID="sn"><br> <resolver:Dependency ref="zenkaiAttr" /><br> <resolver:AttributeEncoder xsi:type="enc:SAML2String" name="sn" friendlyName="sn"/><br> </resolver:AttributeDefinition><br><br> <resolver:AttributeDefinition xsi:type="ad:Simple" id="lmisalesforceid" sourceAttributeID="lmisalesforceid"><br> <resolver:Dependency ref="zenkaiAttr" /><br> <resolver:AttributeEncoder xsi:type="enc:SAML2String" name="lmisalesforceid" friendlyName="lmisalesforceid"/><br> </resolver:AttributeDefinition><br><br> <resolver:AttributeDefinition xsi:type="ad:Simple" id="roleValidLogin" sourceAttributeID="roleValidLogin"><br> <resolver:Dependency ref="zenkaiAttr" /><br> <resolver:AttributeEncoder xsi:type="enc:SAML2String" name="roleValidLogin" friendlyName="roleValidLogin"/><br> </resolver:AttributeDefinition><br><br> <resolver:AttributeDefinition xsi:type="ad:Simple" id="roleIsPerson" sourceAttributeID="roleIsPerson"><br> <resolver:Dependency ref="zenkaiAttr" /><br> <resolver:AttributeEncoder xsi:type="enc:SAML2String" name="roleIsPerson" friendlyName="roleIsPerson"/><br> </resolver:AttributeDefinition><br><br> <resolver:AttributeDefinition xsi:type="ad:Simple" id="roleIsInstructor" sourceAttributeID="roleIsInstructor"><br> <resolver:Dependency ref="zenkaiAttr" /><br> <resolver:AttributeEncoder xsi:type="enc:SAML2String" name="roleIsInstructor" friendlyName="roleIsInstructor"/><br> </resolver:AttributeDefinition><br><br> <resolver:AttributeDefinition xsi:type="ad:Simple" id="roleIsInstructorAssessor" sourceAttributeID="roleIsInstructorAssessor"><br> <resolver:Dependency ref="zenkaiAttr" /><br> <resolver:AttributeEncoder xsi:type="enc:SAML2String" name="roleIsInstructorAssessor" friendlyName="roleIsInstructorAssessor"/><br> </resolver:AttributeDefinition><br><br> <resolver:AttributeDefinition xsi:type="ad:Simple" id="roleIsInstructorTrainer" sourceAttributeID="roleIsInstructorTrainer"><br> <resolver:Dependency ref="zenkaiAttr" /><br> <resolver:AttributeEncoder xsi:type="enc:SAML2String" name="roleIsInstructorTrainer" friendlyName="roleIsInstructorTrainer"/><br> </resolver:AttributeDefinition><br><br> <resolver:AttributeDefinition xsi:type="ad:Simple" id="roleIsInstructorPresenter" sourceAttributeID="roleIsInstructorPresenter"><br> <resolver:Dependency ref="zenkaiAttr" /><br> <resolver:AttributeEncoder xsi:type="enc:SAML2String" name="roleIsInstructorPresenter" friendlyName="roleIsInstructorPresenter"/><br> </resolver:AttributeDefinition><br><br> <resolver:AttributeDefinition xsi:type="ad:Simple" id="roleIsLicensee" sourceAttributeID="roleIsLicensee"><br> <resolver:Dependency ref="zenkaiAttr" /><br> <resolver:AttributeEncoder xsi:type="enc:SAML2String" name="roleIsLicensee" friendlyName="roleIsLicensee"/><br> </resolver:AttributeDefinition><br><br> <resolver:AttributeDefinition xsi:type="ad:Simple" id="roleHasActiveContracts" sourceAttributeID="roleHasActiveContracts"><br> <resolver:Dependency ref="zenkaiAttr" /><br> <resolver:AttributeEncoder xsi:type="enc:SAML2String" name="roleHasActiveContracts" friendlyName="roleHasActiveContracts"/><br> </resolver:AttributeDefinition><br><br> <resolver:AttributeDefinition xsi:type="ad:Simple" id="roleIsGELCandidate" sourceAttributeID="roleIsGELCandidate"><br> <resolver:Dependency ref="zenkaiAttr" /><br> <resolver:AttributeEncoder xsi:type="enc:SAML2String" name="roleIsGELCandidate" friendlyName="roleIsGELCandidate"/><br> </resolver:AttributeDefinition><br><br> <resolver:AttributeDefinition xsi:type="ad:Simple" id="roleIsGELTrained" sourceAttributeID="roleIsGELTrained"><br> <resolver:Dependency ref="zenkaiAttr" /><br> <resolver:AttributeEncoder xsi:type="enc:SAML2String" name="roleIsGELTrained" friendlyName="roleIsGELTrained"/><br> </resolver:AttributeDefinition><br><br> <!-- User roles --><br> <resolver:AttributeDefinition xsi:type="ad:Simple" id="isMemberOf" sourceAttributeID="isMemberOf"><br> <resolver:Dependency ref="zenkaiAttr" /><br> <resolver:AttributeEncoder xsi:type="SAML2String" xmlns="urn:mace:shibboleth:2.0:attribute:encoder" name="isMemberOf" friendlyName="isMemberOf" /><br> </resolver:AttributeDefinition><br><br> <!-- Salesforce required attributes --><br> <resolver:DataConnector id="salesForceStaticAttributes" xsi:type="dc:Static" xmlns="urn:mace:shibboleth:2.0:resolver:dc"><br><br> <dc:Attribute id="User.IsActive"><br> <Value>1</Value><br> </dc:Attribute><br> <br> <dc:Attribute id="portal_id"><br> <Value>06090000000HZ43</Value><br> </dc:Attribute><br><br> <dc:Attribute id="organization_id"><br> <Value>00DO0000000WVPL</Value><br> </dc:Attribute><br><br> <dc:Attribute id="siteurl"><br> <Value>https://uat-lesmills.cs5.force.com/digital</Value><br> </dc:Attribute><br><br> </resolver:DataConnector><br> <br> <resolver:AttributeDefinition id="User.IsActive" xsi:type="ad:Simple" xmlns="urn:mace:shibboleth:2.0:resolver:ad"><br> <resolver:Dependency ref="salesForceStaticAttributes" /><br> <resolver:AttributeEncoder xsi:type="SAML2String" xmlns="urn:mace:shibboleth:2.0:attribute:encoder" nameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified" name="User.IsActive" friendlyName="User.IsActive" /><br> </resolver:AttributeDefinition><br><br> <resolver:AttributeDefinition id="portal_id" xsi:type="ad:Simple" xmlns="urn:mace:shibboleth:2.0:resolver:ad"><br> <resolver:Dependency ref="salesForceStaticAttributes" /><br> <resolver:AttributeEncoder xsi:type="SAML2String" xmlns="urn:mace:shibboleth:2.0:attribute:encoder" nameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified" name="portal_id" friendlyName="portal_id" /><br> </resolver:AttributeDefinition><br><br> <resolver:AttributeDefinition id="organization_id" xsi:type="ad:Simple" xmlns="urn:mace:shibboleth:2.0:resolver:ad"><br> <resolver:Dependency ref="salesForceStaticAttributes" /><br> <resolver:AttributeEncoder xsi:type="SAML2String" xmlns="urn:mace:shibboleth:2.0:attribute:encoder" nameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified" name="organization_id" friendlyName="organization_id" /><br> </resolver:AttributeDefinition><br><br> <resolver:AttributeDefinition id="siteurl" xsi:type="ad:Simple" xmlns="urn:mace:shibboleth:2.0:resolver:ad"><br> <resolver:Dependency ref="salesForceStaticAttributes" /><br> <resolver:AttributeEncoder xsi:type="enc:SAML2String" name="siteurl" friendlyName="siteurl"/><br> </resolver:AttributeDefinition><br><br> <strong><resolver:DataConnector id="zenkaiAttr" xsi:type="ZenkaiLookup" xmlns="urn:mace:lesmills.net.au:idp:resolver:dc"/></strong><br><br> <!-- ========================================== --><br> <!-- Principal Connectors --><br> <!-- ========================================== --><br> <resolver:PrincipalConnector xsi:type="pc:Transient" id="shibTransient" nameIDFormat="urn:mace:shibboleth:1.0:nameIdentifier"/><br> <resolver:PrincipalConnector xsi:type="pc:Transient" id="saml1Unspec" nameIDFormat="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified"/><br> <resolver:PrincipalConnector xsi:type="pc:Transient" id="saml2Transient" nameIDFormat="urn:oasis:names:tc:SAML:2.0:nameid-format:transient"/><br><br></resolver:AttributeResolver></div></div></body></html>