<div dir="ltr">Hello,<br><div><br></div><div>With the below stanzas in my attribute-filter.xml, my tests with RP <a href="http://example.com">example.com</a> fail with error:</div><div>Unable to produce a viable 'sub' claim<br></div><div><br></div><div>If I comment out or remove the second AttributeFilterPolicy (id="<a href="http://rokmetro.com">rokmetro.com</a>") <a href="http://example.com">example.com</a> RP starts working fine!!!!</div><div><br></div><div>What am I doing wrong?</div><div><br></div><div><br></div><div><div style="color:rgb(51,51,51);background-color:rgb(253,246,227);font-family:Menlo,Monaco,"Courier New",monospace;font-size:12px;line-height:18px;white-space:pre"><br><div>    <<span style="color:rgb(38,139,210)">AttributeFilterPolicy</span> <span style="color:rgb(147,161,161)">id</span>=<span style="color:rgb(42,161,152)">"<a href="http://example.com">example.com</a>"</span>></div><div>        <<span style="color:rgb(38,139,210)">PolicyRequirementRule</span> <span style="color:rgb(147,161,161)">xsi:type</span>=<span style="color:rgb(42,161,152)">"AND"</span>></div><div>            <<span style="color:rgb(38,139,210)">Rule</span> <span style="color:rgb(147,161,161)">xsi:type</span>=<span style="color:rgb(42,161,152)">"Requester"</span> <span style="color:rgb(147,161,161)">value</span>=<span style="color:rgb(42,161,152)">"<a href="http://example.com">example.com</a>"</span> /></div><div>            <<span style="color:rgb(38,139,210)">Rule</span> <span style="color:rgb(147,161,161)">xsi:type</span>=<span style="color:rgb(42,161,152)">"oidc:OIDCScope"</span> <span style="color:rgb(147,161,161)">value</span>=<span style="color:rgb(42,161,152)">"openid"</span> /></div><div>        </<span style="color:rgb(38,139,210)">PolicyRequirementRule</span>></div><div>        <<span style="color:rgb(38,139,210)">AttributeRule</span> <span style="color:rgb(147,161,161)">attributeID</span>=<span style="color:rgb(42,161,152)">"subject"</span>></div><div>            <<span style="color:rgb(38,139,210)">PermitValueRule</span> <span style="color:rgb(147,161,161)">xsi:type</span>=<span style="color:rgb(42,161,152)">"ANY"</span> /></div><div>        </<span style="color:rgb(38,139,210)">AttributeRule</span>></div><div>        <<span style="color:rgb(38,139,210)">AttributeRule</span> <span style="color:rgb(147,161,161)">attributeID</span>=<span style="color:rgb(42,161,152)">"rokmetro_EMPLID"</span>></div><div>            <<span style="color:rgb(38,139,210)">PermitValueRule</span> <span style="color:rgb(147,161,161)">xsi:type</span>=<span style="color:rgb(42,161,152)">"ANY"</span> /></div><div>        </<span style="color:rgb(38,139,210)">AttributeRule</span>></div><div>    </<span style="color:rgb(38,139,210)">AttributeFilterPolicy</span>></div><br><div>    <<span style="color:rgb(38,139,210)">AttributeFilterPolicy</span> <span style="color:rgb(147,161,161)">id</span>=<span style="color:rgb(42,161,152)">"<a href="http://rokmetro.com">rokmetro.com</a>"</span>></div><div>        <<span style="color:rgb(38,139,210)">PolicyRequirementRule</span> <span style="color:rgb(147,161,161)">xsi:type</span>=<span style="color:rgb(42,161,152)">"AND"</span>></div><div>            <<span style="color:rgb(38,139,210)">Rule</span> <span style="color:rgb(147,161,161)">xsi:type</span>=<span style="color:rgb(42,161,152)">"Requester"</span> <span style="color:rgb(147,161,161)">value</span>=<span style="color:rgb(42,161,152)">"<a href="http://rokmetro.com">rokmetro.com</a>"</span> /></div><div>            <<span style="color:rgb(38,139,210)">Rule</span> <span style="color:rgb(147,161,161)">xsi:type</span>=<span style="color:rgb(42,161,152)">"oid:OIDCScope"</span> <span style="color:rgb(147,161,161)">value</span>=<span style="color:rgb(42,161,152)">"openid"</span> /></div><div>        </<span style="color:rgb(38,139,210)">PolicyRequirementRule</span>></div><div>        <<span style="color:rgb(38,139,210)">AttributeRule</span> <span style="color:rgb(147,161,161)">attributeID</span>=<span style="color:rgb(42,161,152)">"subject"</span>></div><div>            <<span style="color:rgb(38,139,210)">PermitValueRule</span> <span style="color:rgb(147,161,161)">xsi:type</span>=<span style="color:rgb(42,161,152)">"ANY"</span> /></div><div>        </<span style="color:rgb(38,139,210)">AttributeRule</span>></div><div>        <<span style="color:rgb(38,139,210)">AttributeRule</span> <span style="color:rgb(147,161,161)">attributeID</span>=<span style="color:rgb(42,161,152)">"rokmetro_EMPLID"</span>></div><div>            <<span style="color:rgb(38,139,210)">PermitValueRule</span> <span style="color:rgb(147,161,161)">xsi:type</span>=<span style="color:rgb(42,161,152)">"ANY"</span> /></div><div>        </<span style="color:rgb(38,139,210)">AttributeRule</span>></div><div>    </<span style="color:rgb(38,139,210)">AttributeFilterPolicy</span>></div><br></div></div></div>