Release Notes › Federation Security Services Release Notes › Defects Fixed in the Policy Server 6.0 SP5 Option Pack › Fixes for Policy Server 6.0 SP5 Option Pack › User Attributes in Assertions Not Allowed to be Set to NULL (79547, 76985)

Previous Topic: Unnecessary smdspropc.cpp Error in Policy Server Logs (78618)

Next Topic: SMPORTALURL Query Parameter Subject to Malicious Modification (74278)
User Attributes in Assertions Not Allowed to be Set to NULL (79547, 76985)

Symptom:

For SAML1.1, SAML 2.0 and WS-Federation, a session server error occurs when an assertion is generated with an attribute value that is blank or set to Null.

Solution:

Assertions can be contain user attributes that may be blank or set to Null without causing a session server error. In this case, the assertion attribute value will be sent as NULL.