<div dir="ltr"><div><div><div>Hi:<br><br></div>Based on testing -- When the " p:postAuthenticationFlows="<wbr>attribute-release"  is commented out in the <wbr>DefaultRelyingParty -- the IdP rejects integrations unless it is explicitely listed in RelyingPartyByName.<br><br></div>Am I doing something incorrectly?<br><br></div>We would like a small subset of integrations to be presented with the 'attribute consent' form -- majority would not require it - does it mean that we would have to explicitly list every SP in RelyingPartyByName (whether 'consent form' required or not)? <br><div><br><div><div><div><br><bean id="shibboleth.<wbr>DefaultRelyingParty" parent="RelyingParty"><br>        <property name="profileConfigurations"><br>            <list><br>                <!-- <bean parent="SAML2.SSO" p:postAuthenticationFlows="<wbr>attribute-release" /> --><br>                <!-- <ref bean="SAML2.ECP" /> --><br>                <ref bean="SAML2.Logout" /><br>                <ref bean="SAML2.AttributeQuery" /><br>                <ref bean="SAML2.<wbr>ArtifactResolution" /><br>                <!-- <ref bean="Liberty.SSOS" /> --><br>            </list><br>        </property><br>    </bean><br><br>    <!-- Container for any overrides you want to add. --><br><br>    <util:list id="shibboleth.<wbr>RelyingPartyOverrides"><br>    <br><br>        <br>    <bean parent="RelyingPartyByName" c:relyingPartyIds="<a href="https://sp1.example1/test" target="_blank">https://fictitous</a>"><br>        <property name="profileConfigurations"><br>            <list><br>                <bean parent="SAML2.SSO"  p:postAuthenticationFlows="<wbr>attribute-release" /><br>            </list><br>        </property><br>    </bean></div></div></div></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Wed, Feb 15, 2017 at 1:00 PM, Tom Zeller <span dir="ltr"><<a href="mailto:tzeller@dragonacea.biz" target="_blank">tzeller@dragonacea.biz</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span class="">> Any guidance on where I could be missing? Thanks.<br>
<br>
</span>Looks like you should remove<br>
p:postAuthenticationFlows="<wbr>attribute-release" from your<br>
DefaultRelyingParty.<br>
<span class="HOEnZb"><font color="#888888">--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.<wbr>net</a><br>
</font></span></blockquote></div><br></div>