<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0">
<base href="https://issues.shibboleth.net/jira">
<title>Message Title</title>
</head>
<body class="jira" style="color: #333333; font-family: Arial, sans-serif; font-size: 14px; line-height: 1.429">
<table id="background-table" cellpadding="0" cellspacing="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt; background-color: #f5f5f5; border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt" bgcolor="#f5f5f5">
<!-- header here -->
<tbody>
<tr>
<td id="header-pattern-container" style="padding: 0px; border-collapse: collapse; padding: 10px 20px">
<table id="header-pattern" cellspacing="0" cellpadding="0" border="0" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<tbody>
<tr>
<td id="header-avatar-image-container" valign="top" style="padding: 0px; border-collapse: collapse; vertical-align: top; width: 32px; padding-right: 8px" width="32"> <img id="header-avatar-image" class="image_fix" src="cid:jira-generated-image-avatar-efaf41de-259e-44cc-a543-2c827acb9d08" height="32" width="32" border="0" style="border-radius: 3px; vertical-align: top"> </td>
<td id="header-text-container" valign="middle" style="padding: 0px; border-collapse: collapse; vertical-align: middle; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 1px"> <a class="user-hover" rel="000998514@neu.edu" id="email_000998514@neu.edu" href="https://issues.shibboleth.net/jira/secure/ViewProfile.jspa?name=000998514%40neu.edu" style="color:#3b73af;; color: #3b73af; text-decoration: none">David Mak</a> <strong>created</strong> an issue </td>
</tr>
</tbody>
</table> </td>
</tr>
<tr>
<td id="email-content-container" style="padding: 0px; border-collapse: collapse; padding: 0 20px">
<table id="email-content-table" cellspacing="0" cellpadding="0" border="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt; border-spacing: 0; border-collapse: separate">
<tbody>
<tr>
<!-- there needs to be content in the cell for it to render in some clients -->
<td class="email-content-rounded-top mobile-expand" style="padding: 0px; border-collapse: collapse; color: #ffffff; padding: 0 15px 0 16px; height: 15px; background-color: #ffffff; border-left: 1px solid #cccccc; border-top: 1px solid #cccccc; border-right: 1px solid #cccccc; border-bottom: 0; border-top-right-radius: 5px; border-top-left-radius: 5px; height: 10px; line-height: 10px; padding: 0 15px 0 16px; mso-line-height-rule: exactly" height="10" bgcolor="#ffffff"> </td>
</tr>
<tr>
<td class="email-content-main mobile-expand " style="padding: 0px; border-collapse: collapse; border-left: 1px solid #cccccc; border-right: 1px solid #cccccc; border-top: 0; border-bottom: 0; padding: 0 15px 0 16px; background-color: #ffffff" bgcolor="#ffffff">
<table class="page-title-pattern" cellspacing="0" cellpadding="0" border="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<tbody>
<tr>
<td class="page-title-pattern-first-line " style="padding: 0px; border-collapse: collapse; font-family: Arial, sans-serif; font-size: 14px; padding-top: 10px"> <a href="https://issues.shibboleth.net/jira/browse/IDP" style="color: #3b73af; text-decoration: none">Identity Provider</a> / <a href="https://issues.shibboleth.net/jira/browse/IDP-1278" style="color: #3b73af; text-decoration: none"><img src="cid:jira-generated-image-avatar-6233ade6-e2fc-4c50-9c5d-b93dc719747b" height="16" width="16" border="0" align="absmiddle" alt="Bug" style="vertical-align: text-bottom"></a> <a href="https://issues.shibboleth.net/jira/browse/IDP-1278" style="color: #3b73af; text-decoration: none">IDP-1278</a> </td>
</tr>
<tr>
<td style="vertical-align: top;; padding: 0px; border-collapse: collapse; padding-right: 5px; font-size: 20px; line-height: 30px; mso-line-height-rule: exactly" class="page-title-pattern-header-container"> <span class="page-title-pattern-header" style="font-family: Arial, sans-serif; padding: 0; font-size: 20px; line-height: 30px; mso-text-raise: 2px; mso-line-height-rule: exactly; vertical-align: middle"> <a href="https://issues.shibboleth.net/jira/browse/IDP-1278" style="color: #3b73af; text-decoration: none">CAS username / nameidentifier attribute remapping does not appear to work.</a> </span> </td>
</tr>
</tbody>
</table> </td>
</tr>
<tr>
<td class="email-content-main mobile-expand wrapper-special-margin" style="padding: 0px; border-collapse: collapse; border-left: 1px solid #cccccc; border-right: 1px solid #cccccc; border-top: 0; border-bottom: 0; padding: 0 15px 0 16px; background-color: #ffffff; padding-top: 10px; padding-bottom: 5px" bgcolor="#ffffff">
<table class="keyvalue-table" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<tbody>
<tr>
<th style="color: #707070; font: normal 14px/20px Arial, sans-serif; text-align: left; vertical-align: top; padding: 2px 0">Issue Type:</th>
<td class="has-icon" style="padding: 0px; border-collapse: collapse; font: normal 14px/20px Arial, sans-serif; padding: 2px 0 2px 5px; vertical-align: top"> <img src="cid:jira-generated-image-avatar-6233ade6-e2fc-4c50-9c5d-b93dc719747b" height="16" width="16" border="0" align="absmiddle" alt="Bug" style="vertical-align: text-bottom"> Bug </td>
</tr>
<tr>
<th style="color: #707070; font: normal 14px/20px Arial, sans-serif; text-align: left; vertical-align: top; padding: 2px 0">Affects Versions:</th>
<td style="padding: 0px; border-collapse: collapse; font: normal 14px/20px Arial, sans-serif; padding: 2px 0 2px 5px; vertical-align: top"> 3.3.2 </td>
</tr>
<tr>
<th style="color: #707070; font: normal 14px/20px Arial, sans-serif; text-align: left; vertical-align: top; padding: 2px 0">Assignee:</th>
<td style="padding: 0px; border-collapse: collapse; font: normal 14px/20px Arial, sans-serif; padding: 2px 0 2px 5px; vertical-align: top"> <a class="user-hover" rel="serac@vt.edu" id="email_serac@vt.edu" href="https://issues.shibboleth.net/jira/secure/ViewProfile.jspa?name=serac%40vt.edu" style="color:#3b73af;; color: #3b73af; text-decoration: none">Marvin S Addison</a> </td>
</tr>
<tr>
<th style="color: #707070; font: normal 14px/20px Arial, sans-serif; text-align: left; vertical-align: top; padding: 2px 0">Components:</th>
<td style="padding: 0px; border-collapse: collapse; font: normal 14px/20px Arial, sans-serif; padding: 2px 0 2px 5px; vertical-align: top"> CAS </td>
</tr>
<tr>
<th style="color: #707070; font: normal 14px/20px Arial, sans-serif; text-align: left; vertical-align: top; padding: 2px 0">Created:</th>
<td style="padding: 0px; border-collapse: collapse; font: normal 14px/20px Arial, sans-serif; padding: 2px 0 2px 5px; vertical-align: top"> 18/Apr/18 2:52 PM </td>
</tr>
<tr>
<th style="color: #707070; font: normal 14px/20px Arial, sans-serif; text-align: left; vertical-align: top; padding: 2px 0">Environment:</th>
<td style="padding: 0px; border-collapse: collapse; font: normal 14px/20px Arial, sans-serif; padding: 2px 0 2px 5px; vertical-align: top"> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0; margin-top: 0">For CAS services/end-points configured to override the default CAS username/principal with the value from another available / exposed attribute, using a relaying-party configuration, we are seeing no change in behavior in the response from the IDP/CAS to the relaying party/SP. The backchannel reponse includes a SAML1 payload with the nameidentifier value consisting of the default principal, instead of the specified alternate username attribute.</p> </td>
</tr>
<tr>
<th style="color: #707070; font: normal 14px/20px Arial, sans-serif; text-align: left; vertical-align: top; padding: 2px 0">Labels:</th>
<td style="padding: 0px; border-collapse: collapse; font: normal 14px/20px Arial, sans-serif; padding: 2px 0 2px 5px; vertical-align: top"> RelayState </td>
</tr>
<tr>
<th style="color: #707070; font: normal 14px/20px Arial, sans-serif; text-align: left; vertical-align: top; padding: 2px 0">Priority:</th>
<td class="has-icon" style="padding: 0px; border-collapse: collapse; font: normal 14px/20px Arial, sans-serif; padding: 2px 0 2px 5px; vertical-align: top"> <img src="cid:jira-generated-image-static-critical-87d587fd-2a5a-4eeb-9593-0d2680137efc" height="16" width="16" border="0" align="absmiddle" alt="Critical" style="vertical-align: text-bottom"> Critical </td>
</tr>
<tr>
<th style="color: #707070; font: normal 14px/20px Arial, sans-serif; text-align: left; vertical-align: top; padding: 2px 0">Reporter:</th>
<td style="padding: 0px; border-collapse: collapse; font: normal 14px/20px Arial, sans-serif; padding: 2px 0 2px 5px; vertical-align: top"> <a class="user-hover" rel="000998514@neu.edu" id="email_000998514@neu.edu" href="https://issues.shibboleth.net/jira/secure/ViewProfile.jspa?name=000998514%40neu.edu" style="color:#3b73af;; color: #3b73af; text-decoration: none">David Mak</a> </td>
</tr>
</tbody>
</table> </td>
</tr>
<tr>
<td class="email-content-main mobile-expand issue-description-container" style="padding: 0px; border-collapse: collapse; border-left: 1px solid #cccccc; border-right: 1px solid #cccccc; border-top: 0; border-bottom: 0; padding: 0 15px 0 16px; background-color: #ffffff; padding-top: 5px; padding-bottom: 10px" bgcolor="#ffffff">
<table class="text-paragraph-pattern" cellspacing="0" cellpadding="0" border="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 2px">
<tbody>
<tr>
<td class="text-paragraph-pattern-container mobile-resize-text " style="padding: 0px; border-collapse: collapse; padding: 0 0 10px 0"> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0; margin-top: 0">Relaying Party configuration excerpt:<br> {{<br> <!-- The following are CAS services that need to release the NUID instead of the default UID for the username returned to services --><br> <bean id="shibboleth.regexRelyingParty" parent="RelyingParty" ><br> <property name="activationCondition" ><br> <bean class="net.shibboleth.idp.profile.logic.RelyingPartyIdPredicate" ><br> <constructor-arg name="pred" ><br> <bean class="com.google.common.base.Predicates" factory-method="or" ><br> <constructor-arg><br> <util:list><br> <bean class="com.google.common.base.Predicates" factory-method="containsPattern" c:_0="https://bnrxe.<b>\.neu\.edu\/.</b>" /><br> <bean class="com.google.common.base.Predicates" factory-method="containsPattern" c:_0="https://devweb.<b>i\/wasapp\/myneuapi\/.</b>" /><br> </util:list><br> </constructor-arg><br> </bean><br> </constructor-arg><br> </bean><br> </property><br> <property name="profileConfigurations"><br> <list><br> <ref bean="CAS.LoginConfiguration" /><br> <ref bean="CAS.ProxyConfiguration" /><br> <bean parent="CAS.ValidateConfiguration" p:userAttribute="neuEduNUID" /><br> </list><br> </property><br> </bean><br> }}</p> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">CAS configuration:</p> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">{{<br> <bean id="reloadableServiceRegistry"<br> class="%</p> {idp.cas.serviceRegistryClass:net.shibboleth.idp.cas.service.PatternServiceRegistry} <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">"><br> <property name="definitions"><br> <list><br> <bean class="net.shibboleth.idp.cas.service.ServiceDefinition"<br> c:regex="https://bnrxe.<b>\.neu\.edu(:\d+)?/.</b>"<br> p:group="banner-services"<br> p:authorizedToProxy="false"<br> p:singleLogoutParticipant="true" /><br> <bean class="net.shibboleth.idp.cas.service.ServiceDefinition"<br> c:regex="https://nubanner\.(northeastern|neu)\.edu(:\d+)?/.*"<br> p:group="banner-services"<br> p:authorizedToProxy="true"<br> p:singleLogoutParticipant="true" /><br> <bean class="net.shibboleth.idp.cas.service.ServiceDefinition"<br> c:regex="https://devweb\.neu\.edu(:\d+)?/wasapp/.*"<br> p:group="was-services"<br> p:authorizedToProxy="true"<br> p:singleLogoutParticipant="true" /><br> </list><br> </property><br> </bean><br> }}</p> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">Attribute filter policy:</p> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">{{<br> <AttributeFilterPolicy id="BANNER" ><br> <PolicyRequirementRule xsi:type="OR"><br> <Rule xsi:type="RequesterRegex" regex="https://bnrxe.<b>\.neu\.edu(:\d+)?/.</b>"/><br> <Rule xsi:type="RequesterRegex" regex="https://nubanner\.(northeastern|neu)\.edu(:\d+)?/.*"/><br> </PolicyRequirementRule><br> <AttributeRule attributeID="UDC_IDENTIFIER"><br> <PermitValueRule xsi:type="ANY" /><br> </AttributeRule><br> <AttributeRule attributeID="neuEduNUID"><br> <PermitValueRule xsi:type="ANY" /><br> </AttributeRule><br> </AttributeFilterPolicy></p> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0"><AttributeFilterPolicy><br> <PolicyRequirementRule xsi:type="OR"><br> <Rule xsi:type="RequesterRegex" regex="https://devweb.<b>\.neu\.edu(:\d+)?/wasapp/.</b>"/><br> <Rule xsi:type="Requester" value="https://devweb.neu.edu/wasapp" /><br> </PolicyRequirementRule><br> <AttributeRule attributeID="neuEduNUID"><br> <PermitValueRule xsi:type="ANY" /><br> </AttributeRule><br> <AttributeRule attributeID="uid"><br> <PermitValueRule xsi:type="ANY" /><br> </AttributeRule><br> <AttributeRule attributeID="isMemberOf"><br> <PermitValueRule xsi:type="ANY" /><br> </AttributeRule><br> <AttributeRule attributeID="entrydn"><br> <PermitValueRule xsi:type="ANY" /><br> </AttributeRule><br> </AttributeFilterPolicy><br> }}</p> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">The following excerpt from a log file illustrates a test of this configuration resulting in the CAS username not being set to the new value despite the logs indicating it would be. A network trace of the backend channel between the CAS/IDP server and the service endpoint verifies the payload in the debug log is the same payload sent.</p> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">{{<br> 2018-04-18 13:33:29,323 - DEBUG <span class="error">[net.shibboleth.idp.cas.flow.impl.UpdateIdPSessionWithSPSessionAction:104]</span> - Created SP session CASSPSession: <a href="https://bnrxedevh.neu.edu/applicationNavigator/j_spring_cas_security_check" class="external-link" rel="nofollow" style="color: #3b73af; text-decoration: none">https://bnrxedevh.neu.edu/applicationNavigator/j_spring_cas_security_check</a> via ST-1524072809049-dkB9QxUc0p16R6jUE8FTmqW3D<br> 2018-04-18 13:33:29,323 - DEBUG <span class="error">[net.shibboleth.idp.session.impl.StorageBackedIdPSession:433]</span> - Ignoring SPSession add, session manager is not configured to track them<br> 2018-04-18 13:33:29,324 - DEBUG <span class="error">[net.shibboleth.idp.cas.flow.impl.PrepareTicketValidationResponseAction:88]</span> - Using neuEduNUID for CAS username<br> 2018-04-18 13:33:29,324 - DEBUG <span class="error">[net.shibboleth.idp.cas.flow.impl.PrepareTicketValidationResponseAction:107]</span> - Processing IdPAttribute{id=commonName, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@355ef6be, net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder<br> @d1644fc9], values=[StringAttributeValue</p> {value=David Mak} <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">]}<br> 2018-04-18 13:33:29,324 - DEBUG <span class="error">[net.shibboleth.idp.cas.flow.impl.PrepareTicketValidationResponseAction:107]</span> - Processing IdPAttribute{id=eduPersonScopedAffiliation, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@23ac74, net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAt<br> tributeEncoder@bab64ea8], values=[StringAttributeValue</p> {value=staff@neu.edu} <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">, StringAttributeValue</p> {value=member@neu.edu} <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">]}<br> 2018-04-18 13:33:29,324 - DEBUG <span class="error">[net.shibboleth.idp.cas.flow.impl.PrepareTicketValidationResponseAction:107]</span> - Processing IdPAttribute{id=UDC_IDENTIFIER, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@8c4162f2, net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEnc<br> oder@27b56b59], values=[StringAttributeValue</p> {value=EEE3939EB1DA663B727990E33CDE7F1A} <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">]}<br> 2018-04-18 13:33:29,325 - DEBUG <span class="error">[net.shibboleth.idp.cas.flow.impl.PrepareTicketValidationResponseAction:107]</span> - Processing IdPAttribute{id=neuEduNUID, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@44856ed, net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@<br> fb415ce], values=[StringAttributeValue</p> {value=000998514} <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">]}<br> 2018-04-18 13:33:29,325 - DEBUG <span class="error">[net.shibboleth.idp.cas.flow.impl.PrepareTicketValidationResponseAction:107]</span> - Processing IdPAttribute{id=eduPersonPrincipalName, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML2ScopedStringAttributeEncoder@23a131, net.shibboleth.idp.saml.attribute.encoding.impl.SAML1Scoped<br> StringAttributeEncoder@5625d981], values=[ScopedStringAttributeValue</p> {value=000998514, scope=neu.edu} <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">]}<br> 2018-04-18 13:33:29,325 - INFO <span class="error">[Shibboleth-Audit.SSO:275]</span> - 20180418T173329Z|||https://bnrxedevh.neu.edu/applicationNavigator/j_spring_cas_security_check|https://www.apereo.org/cas/protocol/serviceValidate||||m8k8tt8ck||commonName,eduPersonScopedAffiliation,UDC_IDENTIFIER,neuEduNUID,eduPersonPrincipalName|m8k8tt8ck|ST-1524072809049-dkB9QxUc0p16R6jUE8FTmqW3D|<br> 2018-04-18 13:33:29,325 - DEBUG <span class="error">[net.shibboleth.idp.cas.flow.impl.BuildSamlValidationSuccessMessageAction:113]</span> - Building SAML response for <a href="https://bnrxedevh.neu.edu/applicationNavigator/j_spring_cas_security_check" class="external-link" rel="nofollow" style="color: #3b73af; text-decoration: none">https://bnrxedevh.neu.edu/applicationNavigator/j_spring_cas_security_check</a> in IdP session a5bd67567b7df1c2e1bffca9de2ab9bc0ad6273e379d8e844cdcee1a0d365b60<br> 2018-04-18 13:33:29,326 - DEBUG <span class="error">[net.shibboleth.idp.saml.profile.impl.SpringAwareMessageEncoderFactory:100]</span> - Looking up message encoder based on binding URI: urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding<br> 2018-04-18 13:33:29,327 - DEBUG <span class="error">[PROTOCOL_MESSAGE:70]</span> - <br> <?xml version="1.0" encoding="UTF-8"?><br> <SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/"><br> <SOAP-ENV:Body><br> <saml1p:Response IssueInstant="2018-04-18T17:33:29.326Z"<br> MajorVersion="1" MinorVersion="1"<br> ResponseID="ST-1524072809049-dkB9QxUc0p16R6jUE8FTmqW3D" xmlns:saml1p="urn:oasis:names:tc:SAML:1.0:protocol"><br> <saml1p:Status><br> <saml1p:StatusCode Value="saml1p:Success"/><br> </saml1p:Status><br> <saml1:Assertion<br> AssertionID="_2b06cf6ad4e7346a51224b4a712d5d9a"<br> IssueInstant="2018-04-18T17:33:29.325Z"<br> Issuer="https://neuidmssodev.neu.edu/idp/shibboleth"<br> MajorVersion="1" MinorVersion="1" xmlns:saml1="urn:oasis:names:tc:SAML:1.0:assertion"><br> <saml1:Conditions NotBefore="2018-04-18T17:33:29.325Z" NotOnOrAfter="2018-04-18T17:34:29.325Z"><br> <saml1:AudienceRestrictionCondition><br> <saml1:Audience><a href="https://bnrxedevh.neu.edu/applicationNavigator/j_spring_cas_security_check" class="external-link" rel="nofollow" style="color: #3b73af; text-decoration: none">https://bnrxedevh.neu.edu/applicationNavigator/j_spring_cas_security_check</a></saml1:Audience><br> </saml1:AudienceRestrictionCondition><br> </saml1:Conditions><br> <saml1:AuthenticationStatement<br> AuthenticationInstant="2018-04-18T17:33:29.325Z" AuthenticationMethod="authn/MFA"><br> <saml1:Subject><br> <saml1:NameIdentifier>m8k8tt8ck</saml1:NameIdentifier><br> <saml1:SubjectConfirmation><br> <saml1:ConfirmationMethod>urn:oasis:names:tc:SAML:1.0:cm:artifact</saml1:ConfirmationMethod><br> </saml1:SubjectConfirmation><br> </saml1:Subject><br> </saml1:AuthenticationStatement><br> <saml1:AttributeStatement><br> <saml1:Subject><br> <saml1:NameIdentifier>m8k8tt8ck</saml1:NameIdentifier><br> <saml1:SubjectConfirmation><br> <saml1:ConfirmationMethod>urn:oasis:names:tc:SAML:1.0:cm:artifact</saml1:ConfirmationMethod><br> </saml1:SubjectConfirmation><br> </saml1:Subject><br> <saml1:Attribute AttributeName="commonName" AttributeNamespace="http://www.ja-sig.org/products/cas/"><br> <saml1:AttributeValue<br> xmlns:xsd="http://www.w3.org/2001/XMLSchema"<br> xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xsd:string">David Mak</saml1:AttributeValue><br> </saml1:Attribute><br> <saml1:Attribute<br> AttributeName="eduPersonScopedAffiliation" AttributeNamespace="http://www.ja-sig.org/products/cas/"><br> <saml1:AttributeValue<br> xmlns:xsd="http://www.w3.org/2001/XMLSchema"<br> xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xsd:string">staff@neu.edu</saml1:AttributeValue><br> <saml1:AttributeValue<br> xmlns:xsd="http://www.w3.org/2001/XMLSchema"<br> xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xsd:string">member@neu.edu</saml1:AttributeValue><br> </saml1:Attribute><br> <saml1:Attribute AttributeName="UDC_IDENTIFIER" AttributeNamespace="http://www.ja-sig.org/products/cas/"><br> <saml1:AttributeValue<br> xmlns:xsd="http://www.w3.org/2001/XMLSchema"<br> xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xsd:string">EEE3939EB1DA663B727990E33CDE7F1A</saml1:AttributeValue><br> </saml1:Attribute><br> <saml1:Attribute AttributeName="neuEduNUID" AttributeNamespace="http://www.ja-sig.org/products/cas/"><br> <saml1:AttributeValue<br> xmlns:xsd="http://www.w3.org/2001/XMLSchema"<br> xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xsd:string">000998514</saml1:AttributeValue><br> </saml1:Attribute><br> <saml1:Attribute<br> AttributeName="eduPersonPrincipalName" AttributeNamespace="http://www.ja-sig.org/products/cas/"><br> <saml1:AttributeValue<br> xmlns:xsd="http://www.w3.org/2001/XMLSchema"<br> xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xsd:string">000998514</saml1:AttributeValue><br> </saml1:Attribute><br> </saml1:AttributeStatement><br> </saml1:Assertion><br> </saml1p:Response><br> </SOAP-ENV:Body><br> </SOAP-ENV:Envelope><br> }}</p> </td>
</tr>
</tbody>
</table> </td>
</tr>
<tr>
<td class="email-content-main mobile-expand " style="padding: 0px; border-collapse: collapse; border-left: 1px solid #cccccc; border-right: 1px solid #cccccc; border-top: 0; border-bottom: 0; padding: 0 15px 0 16px; background-color: #ffffff" bgcolor="#ffffff">
<table id="actions-pattern" cellspacing="0" cellpadding="0" border="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 1px">
<tbody>
<tr>
<td id="actions-pattern-container" valign="middle" style="padding: 0px; border-collapse: collapse; padding: 10px 0 10px 24px; vertical-align: middle; padding-left: 0">
<table align="left" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<tbody>
<tr>
<td class="actions-pattern-action-icon-container" style="padding: 0px; border-collapse: collapse; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 0; vertical-align: middle"> <a href="https://issues.shibboleth.net/jira/browse/IDP-1278#add-comment" target="_blank" title="Add Comment" style="color: #3b73af; text-decoration: none"> <img class="actions-pattern-action-icon-image" src="cid:jira-generated-image-static-comment-icon-0dc4a233-ca43-4f6b-b0c1-37be8a551bbd" alt="Add Comment" title="Add Comment" height="16" width="16" border="0" style="vertical-align: middle"> </a> </td>
<td class="actions-pattern-action-text-container" style="padding: 0px; border-collapse: collapse; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 4px; padding-left: 5px"> <a href="https://issues.shibboleth.net/jira/browse/IDP-1278#add-comment" target="_blank" title="Add Comment" style="color: #3b73af; text-decoration: none">Add Comment</a> </td>
</tr>
</tbody>
</table> </td>
</tr>
</tbody>
</table> </td>
</tr>
<!-- there needs to be content in the cell for it to render in some clients -->
<tr>
<td class="email-content-rounded-bottom mobile-expand" style="padding: 0px; border-collapse: collapse; color: #ffffff; padding: 0 15px 0 16px; height: 5px; line-height: 5px; background-color: #ffffff; border-top: 0; border-left: 1px solid #cccccc; border-bottom: 1px solid #cccccc; border-right: 1px solid #cccccc; border-bottom-right-radius: 5px; border-bottom-left-radius: 5px; mso-line-height-rule: exactly" height="5" bgcolor="#ffffff"> </td>
</tr>
</tbody>
</table> </td>
</tr>
<tr>
<td id="footer-pattern" style="padding: 0px; border-collapse: collapse; padding: 12px 20px">
<table id="footer-pattern-container" cellspacing="0" cellpadding="0" border="0" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<tbody>
<tr>
<td id="footer-pattern-text" class="mobile-resize-text" width="100%" style="padding: 0px; border-collapse: collapse; color: #999999; font-size: 12px; line-height: 18px; font-family: Arial, sans-serif; mso-line-height-rule: exactly; mso-text-raise: 2px"> This message was sent by Atlassian JIRA <span id="footer-build-information">(v7.4.2#74004-<span title="586975da6d5c632f4f0de24a42c40182e6b9ead0" data-commit-id="586975da6d5c632f4f0de24a42c40182e6b9ead0}">sha1:586975d</span>)</span> </td>
<td id="footer-pattern-logo-desktop-container" valign="top" style="padding: 0px; border-collapse: collapse; padding-left: 20px; vertical-align: top">
<table style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<tbody>
<tr>
<td id="footer-pattern-logo-desktop-padding" style="padding: 0px; border-collapse: collapse; padding-top: 3px"> <img id="footer-pattern-logo-desktop" src="cid:jira-generated-image-static-footer-desktop-logo-332ef17c-5b92-4254-b0dc-33a228ce4823" alt="Atlassian logo" title="Atlassian logo" width="169" height="36" class="image_fix"> </td>
</tr>
</tbody>
</table> </td>
</tr>
</tbody>
</table> </td>
</tr>
</tbody>
</table>
</body>
</html>