<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto">Hong,<div><br></div><div>Your IdP will usually send an assertion with an AuthenticationStatement but no AttributeStatement at all. The SP will not see this as an error and it’s not an error in SAML because attributes aren’t mandatory and you can’t know whether the IdP meant to send any.</div><div><br></div><div>Hope this helps,</div><div>Nate.<br><br><div id="AppleMailSignature">Semt frim mt iPone</div><div><br>On Aug 31, 2018, at 9:17 AM, Hong Ye <<a href="mailto:hy93@cornell.edu">hy93@cornell.edu</a>> wrote:<br><br></div><blockquote type="cite"><div>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"Helvetica Neue";
panose-1:2 0 5 3 0 0 0 2 0 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
p.p1, li.p1, div.p1
{mso-style-name:p1;
margin:0in;
margin-bottom:.0001pt;
font-size:9.0pt;
font-family:"Helvetica Neue";
color:#454545;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style>
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt">Hello,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="p1"><span style="font-size:11.0pt">I saw “</span>Error resolving attributes” in IDP process log and I found corresponding entry in IDP audit log which has no attribute released. When this error occurred, what was status shown in SAML assertion? <o:p></o:p></p>
<p class="p1"><o:p> </o:p></p>
<p class="p1">Thanks,<o:p></o:p></p>
<p class="p1">Hong<o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
</div>
<pre>-- <br>
For Consortium Member technical support, see <a href="https://wiki.shibboleth.net/confluence/x/coFAAg">https://wiki.shibboleth.net/confluence/x/coFAAg</a><br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a></pre></div></blockquote></div></body></html>