[JIRA] (SSPCPP-971) AttributeResolver Handler always includes NameID attributes NameQualifier and SPNameQualifier

[Scott Koranda (Jira)]

Scott Koranda ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=61a658abd5986c006a2d7662 ) *created* an issue

Shibboleth SP - C++ ( https://shibboleth.atlassian.net/browse/SSPCPP?atlOrigin=eyJpIjoiYWJhYzE4MjkyZGM5NDBmNzgyNjllZjcyYjM0M2Q5MWUiLCJwIjoiaiJ9 ) / Bug ( https://shibboleth.atlassian.net/browse/SSPCPP-971?atlOrigin=eyJpIjoiYWJhYzE4MjkyZGM5NDBmNzgyNjllZjcyYjM0M2Q5MWUiLCJwIjoiaiJ9 ) SSPCPP-971 ( https://shibboleth.atlassian.net/browse/SSPCPP-971?atlOrigin=eyJpIjoiYWJhYzE4MjkyZGM5NDBmNzgyNjllZjcyYjM0M2Q5MWUiLCJwIjoiaiJ9 ) AttributeResolver Handler always includes NameID attributes NameQualifier and SPNameQualifier ( https://shibboleth.atlassian.net/browse/SSPCPP-971?atlOrigin=eyJpIjoiYWJhYzE4MjkyZGM5NDBmNzgyNjllZjcyYjM0M2Q5MWUiLCJwIjoiaiJ9 )

Issue Type: Bug Affects Versions: 3.4.1 Assignee: Scott Cantor ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A5b78efc9-1379-42cc-a3f6-56c6ea3a0007 ) Components: Attribute Resolution / Filtering Created: 20/Mar/23 8:42 AM Priority: Trivial Reporter: Scott Koranda ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=61a658abd5986c006a2d7662 )

When the AttributeResolver Handler is invoked it sends an AttributeQuery element that includes a NameID element that always has the NameQualifier and SPNameQualifier attributes defined. There appears to be no way to either configure the SP or modify the Handler query parameters to prevent the NameQualifier and SPNameQualifier attributes from being sent.

This appears to be a change from version 2.x of the SP.

This is an issue for SAML attribute authorities that need to resolve the principal sent as the value of the NameID without any qualifiers.

( https://shibboleth.atlassian.net/browse/SSPCPP-971#add-comment?atlOrigin=eyJpIjoiYWJhYzE4MjkyZGM5NDBmNzgyNjllZjcyYjM0M2Q5MWUiLCJwIjoiaiJ9 ) Add Comment ( https://shibboleth.atlassian.net/browse/SSPCPP-971#add-comment?atlOrigin=eyJpIjoiYWJhYzE4MjkyZGM5NDBmNzgyNjllZjcyYjM0M2Q5MWUiLCJwIjoiaiJ9 )

Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&referrer=utm_source%3DNotificationLink%26utm_medium%3DEmail ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailNotificationLink&mt=8 ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100218- sha1:fe49d35 )
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/commits/attachments/20230320/ce0c0ac6/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-comment-icon-8c3a6d5e-7480-4b1a-90be-757bc30e615d
Type: image/png
Size: 1084 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20230320/ce0c0ac6/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-trivial-5d2c4240-9506-4a78-85f2-ca82c2722ef5
Type: image/png
Size: 446 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20230320/ce0c0ac6/attachment-0005.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-avatar-aad2180d-d71b-49f5-af2e-e977ed19f9cf
Type: image/png
Size: 345 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20230320/ce0c0ac6/attachment-0006.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-footer-desktop-logo-f66eb39a-a1c8-4d81-9eb8-066a602c5a71
Type: image/png
Size: 10805 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20230320/ce0c0ac6/attachment-0007.png>