<div dir="ltr">Oh! Sorry, a missing "c" in <span style="font-family:Menlo,Monaco,"Courier New",monospace;font-size:12px;white-space:pre-wrap;background-color:rgb(253,246,227);color:rgb(147,161,161)">xsi:type</span><span style="color:rgb(51,51,51);font-family:Menlo,Monaco,"Courier New",monospace;font-size:12px;white-space:pre-wrap;background-color:rgb(253,246,227)">=</span><span style="font-family:Menlo,Monaco,"Courier New",monospace;font-size:12px;white-space:pre-wrap;background-color:rgb(253,246,227);color:rgb(42,161,152)">"oid:OIDCScope"</span></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Fri, Aug 27, 2021 at 5:07 PM Mohamed Lrhazi <<a href="mailto:lrhazi@cua.edu">lrhazi@cua.edu</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr">Hello,<br><div><br></div><div>With the below stanzas in my attribute-filter.xml, my tests with RP <a href="http://example.com" target="_blank">example.com</a> fail with error:</div><div>Unable to produce a viable 'sub' claim<br></div><div><br></div><div>If I comment out or remove the second AttributeFilterPolicy (id="<a href="http://rokmetro.com" target="_blank">rokmetro.com</a>") <a href="http://example.com" target="_blank">example.com</a> RP starts working fine!!!!</div><div><br></div><div>What am I doing wrong?</div><div><br></div><div><br></div><div><div style="color:rgb(51,51,51);background-color:rgb(253,246,227);font-family:Menlo,Monaco,"Courier New",monospace;font-size:12px;line-height:18px;white-space:pre-wrap"><br><div> <<span style="color:rgb(38,139,210)">AttributeFilterPolicy</span> <span style="color:rgb(147,161,161)">id</span>=<span style="color:rgb(42,161,152)">"<a href="http://example.com" target="_blank">example.com</a>"</span>></div><div> <<span style="color:rgb(38,139,210)">PolicyRequirementRule</span> <span style="color:rgb(147,161,161)">xsi:type</span>=<span style="color:rgb(42,161,152)">"AND"</span>></div><div> <<span style="color:rgb(38,139,210)">Rule</span> <span style="color:rgb(147,161,161)">xsi:type</span>=<span style="color:rgb(42,161,152)">"Requester"</span> <span style="color:rgb(147,161,161)">value</span>=<span style="color:rgb(42,161,152)">"<a href="http://example.com" target="_blank">example.com</a>"</span> /></div><div> <<span style="color:rgb(38,139,210)">Rule</span> <span style="color:rgb(147,161,161)">xsi:type</span>=<span style="color:rgb(42,161,152)">"oidc:OIDCScope"</span> <span style="color:rgb(147,161,161)">value</span>=<span style="color:rgb(42,161,152)">"openid"</span> /></div><div> </<span style="color:rgb(38,139,210)">PolicyRequirementRule</span>></div><div> <<span style="color:rgb(38,139,210)">AttributeRule</span> <span style="color:rgb(147,161,161)">attributeID</span>=<span style="color:rgb(42,161,152)">"subject"</span>></div><div> <<span style="color:rgb(38,139,210)">PermitValueRule</span> <span style="color:rgb(147,161,161)">xsi:type</span>=<span style="color:rgb(42,161,152)">"ANY"</span> /></div><div> </<span style="color:rgb(38,139,210)">AttributeRule</span>></div><div> <<span style="color:rgb(38,139,210)">AttributeRule</span> <span style="color:rgb(147,161,161)">attributeID</span>=<span style="color:rgb(42,161,152)">"rokmetro_EMPLID"</span>></div><div> <<span style="color:rgb(38,139,210)">PermitValueRule</span> <span style="color:rgb(147,161,161)">xsi:type</span>=<span style="color:rgb(42,161,152)">"ANY"</span> /></div><div> </<span style="color:rgb(38,139,210)">AttributeRule</span>></div><div> </<span style="color:rgb(38,139,210)">AttributeFilterPolicy</span>></div><br><div> <<span style="color:rgb(38,139,210)">AttributeFilterPolicy</span> <span style="color:rgb(147,161,161)">id</span>=<span style="color:rgb(42,161,152)">"<a href="http://rokmetro.com" target="_blank">rokmetro.com</a>"</span>></div><div> <<span style="color:rgb(38,139,210)">PolicyRequirementRule</span> <span style="color:rgb(147,161,161)">xsi:type</span>=<span style="color:rgb(42,161,152)">"AND"</span>></div><div> <<span style="color:rgb(38,139,210)">Rule</span> <span style="color:rgb(147,161,161)">xsi:type</span>=<span style="color:rgb(42,161,152)">"Requester"</span> <span style="color:rgb(147,161,161)">value</span>=<span style="color:rgb(42,161,152)">"<a href="http://rokmetro.com" target="_blank">rokmetro.com</a>"</span> /></div><div> <<span style="color:rgb(38,139,210)">Rule</span> <span style="color:rgb(147,161,161)">xsi:type</span>=<span style="color:rgb(42,161,152)">"oid:OIDCScope"</span> <span style="color:rgb(147,161,161)">value</span>=<span style="color:rgb(42,161,152)">"openid"</span> /></div><div> </<span style="color:rgb(38,139,210)">PolicyRequirementRule</span>></div><div> <<span style="color:rgb(38,139,210)">AttributeRule</span> <span style="color:rgb(147,161,161)">attributeID</span>=<span style="color:rgb(42,161,152)">"subject"</span>></div><div> <<span style="color:rgb(38,139,210)">PermitValueRule</span> <span style="color:rgb(147,161,161)">xsi:type</span>=<span style="color:rgb(42,161,152)">"ANY"</span> /></div><div> </<span style="color:rgb(38,139,210)">AttributeRule</span>></div><div> <<span style="color:rgb(38,139,210)">AttributeRule</span> <span style="color:rgb(147,161,161)">attributeID</span>=<span style="color:rgb(42,161,152)">"rokmetro_EMPLID"</span>></div><div> <<span style="color:rgb(38,139,210)">PermitValueRule</span> <span style="color:rgb(147,161,161)">xsi:type</span>=<span style="color:rgb(42,161,152)">"ANY"</span> /></div><div> </<span style="color:rgb(38,139,210)">AttributeRule</span>></div><div> </<span style="color:rgb(38,139,210)">AttributeFilterPolicy</span>></div><br></div></div></div>
</blockquote></div>