Stop assuming an ePTID is an array.

That might now be the case when the assertion was parsed from the original SAML assertion, but definitely not when we are building the assertion manually.
simplesamlphp · Nov 9, 2016 · d01b753 · d01b753
1 parent 4853f1e
commit d01b753
Showing 1 changed file with 8 additions and 1 deletion.
diff --git a/src/SAML2/Assertion.php b/src/SAML2/Assertion.php
@@ -1504,7 +1504,14 @@ private function addAttributeStatement(\DOMElement $root)
                 foreach ($values as $eptiValue) {
                     $attributeValue = $document->createElementNS(Constants::NS_SAML, 'saml:AttributeValue');
                     $attribute->appendChild($attributeValue);
-                    Utils::addNameId($attributeValue, $eptiValue);
+                    if (is_array($eptiValue)) {
+                        Utils::addNameId($attributeValue, $eptiValue);
+                    } elseif ($eptiValue instanceof \DOMNodeList) {
+                        $node = $root->ownerDocument->importNode($eptiValue->item(0), true);
+                        $attributeValue->appendChild($node);
+                    } else {
+                        $attributeValue->textContent = $eptiValue;
+                    }
                 }
 
                 continue;