Release Notes › Federation Security Services Release Notes › Defects Fixed in the Policy Server 6.0 SP5 Option Pack › Fixes for Policy Server 6.0 SP5 Option Pack › SAML 2.0 Authentication Scheme with Server Redirect Mode Set Ignores Assertion Attributes with Certain Name Formats (54517)

Previous Topic: Apply Button Deletes the XPATH query for XML Body Variable (54839)

Next Topic: SiteMinder Fails to Process a Third-party Assertion with Multi-valued Attributes (54562)
SAML 2.0 Authentication Scheme with Server Redirect Mode Set Ignores Assertion Attributes with Certain Name Formats (54517)

Symptom:

When an assertion contains attributes with a Name Format of unspecified or url, the Service Provider at the consumer ignores the assertion attributes if the SAML 2.0 authentication scheme is configured with the Server Redirect mode.

Specifically, the following attributes are ignored:

It only sets attributes with a name format of urn:oasis:names:tc:SAML:2.0:attrname-format:basic.

Solution:

The unspecified and url attributes are no longer ignored in Server Redirect mode.