<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="font-family: Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Aha, understood! I changed the propertyName in relying-party.xml to "activationCondition" and updated the SP metadata to:</div>
<div style="font-family: Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<saml:Attribute Name="http://shibboleth.net/ns/profiles/saml2/sso/ecp/activationCondition" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
<div> <saml:AttributeValue>true</saml:AttributeValue></div>
<span></saml:Attribute></span><br>
</div>
<div>
<div id="appendonsend"></div>
<div style="font-family:Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<br>
</div>
<div style="font-family:Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
It works as expected. Thanks for clarifying!</div>
<div style="font-family:Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<br>
</div>
<div style="font-family:Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
Andy<br>
</div>
<div style="font-family:Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<br>
</div>
<div style="font-family:Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<br>
</div>
<hr tabindex="-1" style="display:inline-block; width:98%">
<div id="divRplyFwdMsg" dir="ltr"><font style="font-size:11pt" face="Calibri, sans-serif" color="#000000"><b>From:</b> users <users-bounces@shibboleth.net> on behalf of Cantor, Scott <cantor.2@osu.edu><br>
<b>Sent:</b> Thursday, May 27, 2021 5:26 AM<br>
<b>To:</b> Shib Users <users@shibboleth.net><br>
<b>Subject:</b> Re: MDDriven ECP profile activation</font>
<div> </div>
</div>
<div class="BodyFragment"><font size="2"><span style="font-size:11pt">
<div class="PlainText">[This email originated from outside of OSU. Use caution with links and attachments.]<br>
<br>
On 5/27/21, 2:13 AM, "users on behalf of Andrew Jason Morgan" <users-bounces@shibboleth.net on behalf of morgan@oregonstate.edu> wrote:<br>
<br>
> Where did I goof? How do I create a new MD tag to trigger the activation?<br>
<br>
You're misappropriating the propertyName in that wiring to mean the name of your metadata tag, it's not. The property name in those functions is the name of the setting in the configuration, which is activationCondition, as in the example. The tag name should
be "<a href="https://nam04.safelinks.protection.outlook.com/?url=http%3A%2F%2Fshibboleth.net%2Fns%2Fprofiles%2Fsaml2%2Fsso%2Fecp%2FactivationCondition&data=04%7C01%7C%7C7237e4440b7740d0418a08d9210aaffc%7Cce6d05e13c5e4d6287a84c4a2713c113%7C0%7C0%7C637577152052904625%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=6l3nVHolVfSyE5Xy7IXhFnsnRSBoAcYhbHG4euOqeds%3D&reserved=0">https://nam04.safelinks.protection.outlook.com/?url=http%3A%2F%2Fshibboleth.net%2Fns%2Fprofiles%2Fsaml2%2Fsso%2Fecp%2FactivationCondition&data=04%7C01%7C%7C7237e4440b7740d0418a08d9210aaffc%7Cce6d05e13c5e4d6287a84c4a2713c113%7C0%7C0%7C637577152052904625%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=6l3nVHolVfSyE5Xy7IXhFnsnRSBoAcYhbHG4euOqeds%3D&reserved=0</a>",
which is what all that code tries to find unless you add more settings (for no obvious reason) to change the name of the tag it looks for.<br>
<br>
I didn't actually include the metadata in the example, I'll add it.<br>
<br>
-- Scott<br>
<br>
<br>
--<br>
For Consortium Member technical support, see <a href="https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwiki.shibboleth.net%2Fconfluence%2Fx%2FcoFAAg&data=04%7C01%7C%7C7237e4440b7740d0418a08d9210aaffc%7Cce6d05e13c5e4d6287a84c4a2713c113%7C0%7C0%7C637577152052914616%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=%2FJJ8nRB9RcOWwLU6NJleSmMosnm%2BjxKlJ6ddsQQ4D6w%3D&reserved=0">
https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwiki.shibboleth.net%2Fconfluence%2Fx%2FcoFAAg&data=04%7C01%7C%7C7237e4440b7740d0418a08d9210aaffc%7Cce6d05e13c5e4d6287a84c4a2713c113%7C0%7C0%7C637577152052914616%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=%2FJJ8nRB9RcOWwLU6NJleSmMosnm%2BjxKlJ6ddsQQ4D6w%3D&reserved=0</a><br>
To unsubscribe from this list send an email to users-unsubscribe@shibboleth.net<br>
</div>
</span></font></div>
</div>
</body>
</html>