<div dir="ltr">Hi,<br><br>We have an IdP 3.3.2 in test use.<br><br>There are problems with releasing attributes type AttributeInMetadata. In this example only mail and eppn are released. What's wrong with AttributeInMetadata? Idp ignores it. Log shows no error.<br><br><br>Attribute-filter is:<br>---------------------<br><?xml version="1.0" encoding="iso-8859-1"?><br><br><AttributeFilterPolicyGroup id="ShibbolethFilterPolicy"<br>        xmlns="urn:mace:shibboleth:2.0:afp"<br>        xmlns:xsi="<a href="http://www.w3.org/2001/XMLSchema-instance">http://www.w3.org/2001/XMLSchema-instance</a>"<br>        xsi:schemaLocation="urn:mace:shibboleth:2.0:afp <a href="http://shibboleth.net/schema/idp/shibboleth-afp.xsd">http://shibboleth.net/schema/idp/shibboleth-afp.xsd</a>"><br><br><AttributeFilterPolicy id="toall"><br><br><PolicyRequirementRule xsi:type="ANY" /><br><br><AttributeRule attributeID="sn"><br>    <PermitValueRule xsi:type="AttributeInMetadata" /><br></AttributeRule><br><br><AttributeRule attributeID="eduPersonPrincipalName"><br>    <PermitValueRule xsi:type="ANY" /><br></AttributeRule><br><br><AttributeRule attributeID="mail"><br>    <PermitValueRule xsi:type="ANY" /><br></AttributeRule><br><br></AttributeFilterPolicy><br><br></AttributeFilterPolicyGroup><br>----------------------------------<br><br>Metadata's AttributeConsumingService:<br>-------------------------------------<br><md:AttributeConsumingService index="1" isDefault="true"><br>        <md:ServiceName xml:lang="fi">Sippo</md:ServiceName><br>        <md:ServiceName xml:lang="en">Sippo</md:ServiceName><br>        <md:ServiceDescription xml:lang="fi">Sippo</md:ServiceDescription><br>        <md:ServiceDescription xml:lang="en">Sippo</md:ServiceDescription><br>        <md:RequestedAttribute FriendlyName="eduPersonPrincipalName" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/><br>        <md:RequestedAttribute FriendlyName="mail" Name="urn:oid:0.9.2342.19200300.100.1.3" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/><br>        <md:RequestedAttribute FriendlyName="sn" Name="urn:oid:2.5.4.4" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/><br>    </md:AttributeConsumingService><br>-----------------------------------<br><br>Thanks!<br><br><br></div>