Enrique
Just curious if this resolves your problem rather than having to write a Custom AGP.
For multivalued attributes, prefix FMATTR:
Example: (multivalued attributes) FMATTR:SM_USERGROUPS
Before Applying :
If we set the response without FMATTR [role=<%userattr="SM_USERGROUPS"%>. The policy server returns all groups the user is mapped too in a single string separated with ^.
Example : Group1^Group2^Group3^Group4.
After Applying:
In the XML Document the values of the role attribute should be in different tags.
<ns1:Attribute AttributeName="role" AttributeNamespace="http://schemas.xmlsoap.org/claims">
<ns1:AttributeValue>Group1</ns1:AttributeValue>
<ns1:AttributeValue>Group2</ns1:AttributeValue>
<ns1:AttributeValue>Group3</ns1:AttributeValue>
Regards
Hubert