<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof">
Hi,</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof">
I have a shibboleth idp 4.3 setup that works perfectly if I put attributes on alwaysRelease, like this:</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof ContentPasted0">
<AttributeFilterPolicy id="alwaysRelease">
<div class="ContentPasted0"> <PolicyRequirementRule xsi:type="ANY" /></div>
<div class="ContentPasted0"> <AttributeRule attributeID="proxied-uid" permitAny="true" /></div>
<div class="ContentPasted0 elementToProof"> <AttributeRule attributeID="name" permitAny="true" /></div>
<AttributeRule attributeID="mail" permitAny="true" /></div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof ContentPasted0 ContentPasted1">
</AttributeFilterPolicy></div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof ContentPasted0 ContentPasted1">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof ContentPasted0 ContentPasted1">
I get all attributes.<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof ContentPasted0 ContentPasted1">
But if I want to only release the latter two attributes to specific relying party, like this:</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof ContentPasted0 ContentPasted1">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof ContentPasted0 ContentPasted1">
<div style="font-size:12pt" class="ContentPasted0 ContentPasted2"><AttributeFilterPolicy id="alwaysRelease">
<div class="ContentPasted0 ContentPasted2"> <PolicyRequirementRule xsi:type="ANY" /></div>
<div class="ContentPasted0 ContentPasted2"> <AttributeRule attributeID="proxied-uid" permitAny="true" /></div>
<div class="ContentPasted0 ContentPasted2 elementToProof"><span style="font-size:12pt" class="ContentPasted0 ContentPasted2"></span></div>
</div>
<span style="font-size:12pt" class="ContentPasted0 ContentPasted1 ContentPasted2"></AttributeFilterPolicy></span></div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof ContentPasted0 ContentPasted1 ContentPasted3">
<AttributeFilterPolicy id="saml-proxy-pass-through">
<div class="ContentPasted3 elementToProof"> <PolicyRequirementRule xsi:type="Requester" value="https://sp.example.com/sp" /></div>
<div class="ContentPasted3 elementToProof"> <span class="ContentPasted0 ContentPasted2">
<AttributeRule attributeID="name" permitAny="true" /></span> <br>
</div>
<div class="ContentPasted3 elementToProof"> <AttributeRule attributeID="mail" permitAny="true" /></div>
<div class="ContentPasted3 elementToProof"></div>
</AttributeFilterPolicy></div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof ContentPasted0 ContentPasted1 ContentPasted3">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof ContentPasted0 ContentPasted1 ContentPasted3 ContentPasted4 ContentPasted5">
I then only get proxied-uid, not the other two attributes. <a href="https://sp.example.com/sp" id="LPlnk483235">
"https://sp.example.com/sp"</a> is exactly the relying party entityID. I am puzzled why this would not work. The logs say name and mail resolved to null in this case. But it is all ok in the first scenario while no other changes are involved.<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof ContentPasted0 ContentPasted1 ContentPasted3 ContentPasted4 ContentPasted5">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof ContentPasted0 ContentPasted1 ContentPasted3 ContentPasted4 ContentPasted5">
Are there any other configurations that might impact the attribute release?</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof ContentPasted0 ContentPasted1 ContentPasted3 ContentPasted4 ContentPasted5">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof ContentPasted0 ContentPasted1 ContentPasted3 ContentPasted4 ContentPasted5">
Thanks a lot for any help.</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof ContentPasted0 ContentPasted1 ContentPasted3 ContentPasted4 ContentPasted5">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof ContentPasted0 ContentPasted1 ContentPasted3 ContentPasted4 ContentPasted5">
Johnny Z.</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof ContentPasted0 ContentPasted1 ContentPasted3 ContentPasted4 ContentPasted5">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof ContentPasted0 ContentPasted1 ContentPasted3 ContentPasted4 ContentPasted5">
<br>
</div>
</body>
</html>