<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<div class="moz-cite-prefix">On 08/25/2017 04:04 PM, Greg Haverkamp
wrote:<br>
</div>
<blockquote type="cite"
cite="mid:CAHEFaoSwOz4JW-ovK1K-mUK9zSritb3OcGZrHTfkZOJ0dn0DcA@mail.gmail.com">
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<div dir="ltr">On Fri, Aug 25, 2017 at 12:39 PM, Richard Frovarp <span
dir="ltr"><<a href="mailto:richard.frovarp@ndsu.edu"
target="_blank" moz-do-not-send="true">richard.frovarp@ndsu.edu</a>></span> wrote:
<blockquote class="gmail_quote" style="margin:0px 0px 0px
0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"> <span
style="font-size:12.8px">The problem is if idp.authn.flows
is set to MFA, it isn't releasing any attributes, despite
the fact that it is configured to release attributes. If I
change that from MFA to Password, it obviously doesn't do
the MFA check, but it also releases the attributes. No
matter what that value is, testing via aacli.sh gives back
the proper list of attributes.</span></blockquote>
<br>
To quote Scott from the linked thread: "Are you clearing the
AttributeResolutionContext like the example does, or not?"
<div><br>
</div>
<div><a
href="http://shibboleth.1660669.n2.nabble.com/My-MFA-script-is-clearing-the-list-of-requested-attributes-tp7633443p7633460.html"
moz-do-not-send="true">http://shibboleth.1660669.n2.nabble.com/My-MFA-script-is-clearing-the-list-of-requested-attributes-tp7633443p7633460.html</a><br>
</div>
<div><br>
</div>
<div>Greg</div>
</div>
</blockquote>
<br>
Yeah, problem was not clearing the context. I don't know that I
would have ever found that post. Thanks for the help.<br>
</body>
</html>