<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0">
<base href="https://shibboleth.atlassian.net">
<title>Message Title</title>
</head>
<body class="jira" style="color: #333333; font-family: Arial, sans-serif; font-size: 14px; line-height: 1.429">
<table id="background-table" cellpadding="0" cellspacing="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0; mso-table-rspace: 0; background-color: #f5f5f5; border-collapse: collapse; mso-table-lspace: 0; mso-table-rspace: 0" bgcolor="#f5f5f5"> <!-- header here -->
<tbody>
<tr>
<td id="header-pattern-container" style="padding: 0; border-collapse: collapse; padding: 10px 20px">
<table id="header-pattern" cellspacing="0" cellpadding="0" border="0" style="border-collapse: collapse; mso-table-lspace: 0; mso-table-rspace: 0">
<tbody>
<tr>
<td id="header-avatar-image-container" valign="top" style="padding: 0; border-collapse: collapse; vertical-align: top; width: 32px; padding-right: 8px" width="32"> <img id="header-avatar-image" class="image_fix" src="https://secure.gravatar.com/avatar/6dfa9fd0a17ab3009926e129a18674bd?d=https%3A%2F%2Favatar-management--avatars.us-west-2.prod.public.atl-paas.net%2Finitials%2FC-0.png" height="32" width="32" border="0" style="border-radius: 3px; vertical-align: top"> </td>
<td id="header-text-container" valign="middle" style="padding: 0; border-collapse: collapse; vertical-align: middle; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 1px"> <a class="user-hover" rel="557058:d9c5b0aa-4ee5-45bd-b913-57fd7ee7e854" style="color:#3b73af;; color: #3b73af; text-decoration: none" id="email_557058:d9c5b0aa-4ee5-45bd-b913-57fd7ee7e854" href="https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3Ad9c5b0aa-4ee5-45bd-b913-57fd7ee7e854"> Chris.Phillips@canarie.ca </a> <strong>created</strong> an issue </td>
</tr>
</tbody>
</table> </td>
</tr>
<tr>
<td id="email-content-container" style="padding: 0; border-collapse: collapse; padding: 0 20px">
<table id="email-content-table" cellspacing="0" cellpadding="0" border="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0; mso-table-rspace: 0; border-spacing: 0; border-collapse: separate">
<tbody>
<tr> <!-- there needs to be content in the cell for it to render in some clients -->
<td class="email-content-rounded-top mobile-expand" style="padding: 0; border-collapse: collapse; color: #ffffff; padding: 0 15px 0 16px; height: 15px; background-color: #ffffff; border-left: 1px solid #cccccc; border-top: 1px solid #cccccc; border-right: 1px solid #cccccc; border-bottom: 0; border-top-right-radius: 5px; border-top-left-radius: 5px; height: 10px; line-height: 10px; padding: 0 15px 0 16px; mso-line-height-rule: exactly" height="10" bgcolor="#ffffff"> </td>
</tr>
<tr>
<td class="email-content-main mobile-expand " style="padding: 0; border-collapse: collapse; border-left: 1px solid #cccccc; border-right: 1px solid #cccccc; border-top: 0; border-bottom: 0; padding: 0 15px 0 16px; background-color: #ffffff" bgcolor="#ffffff">
<table class="page-title-pattern" cellspacing="0" cellpadding="0" border="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0; mso-table-rspace: 0">
<tbody>
<tr>
<td class="page-title-pattern-first-line " style="padding: 0; border-collapse: collapse; font-family: Arial, sans-serif; font-size: 14px; padding-top: 10px"> <a href="https://shibboleth.atlassian.net/browse/IDP?atlOrigin=eyJpIjoiMGMwNDgxNzAzOTNhNDIyNjk0MmIxZWNjYWZmY2U2YjMiLCJwIjoiaiJ9" style="color: #3b73af; text-decoration: none">Identity Provider</a> / <a href="https://shibboleth.atlassian.net/browse/IDP-1938?atlOrigin=eyJpIjoiMGMwNDgxNzAzOTNhNDIyNjk0MmIxZWNjYWZmY2U2YjMiLCJwIjoiaiJ9" style="color: #3b73af; text-decoration: none"><img src="cid:jira-generated-image-avatar-c5857674-a982-4490-aac0-c59b2bd45bed" height="16" width="16" border="0" align="absmiddle" alt="Bug" style="vertical-align: text-bottom"></a> <a href="https://shibboleth.atlassian.net/browse/IDP-1938?atlOrigin=eyJpIjoiMGMwNDgxNzAzOTNhNDIyNjk0MmIxZWNjYWZmY2U2YjMiLCJwIjoiaiJ9" style="color: #3b73af; text-decoration: none">IDP-1938</a> </td>
</tr>
<tr>
<td style="vertical-align: top;; padding: 0; border-collapse: collapse; padding-right: 5px; font-size: 20px; line-height: 30px; mso-line-height-rule: exactly" class="page-title-pattern-header-container"> <span class="page-title-pattern-header" style="font-family: Arial, sans-serif; padding: 0; font-size: 20px; line-height: 30px; mso-text-raise: 2px; mso-line-height-rule: exactly; vertical-align: middle"> <a href="https://shibboleth.atlassian.net/browse/IDP-1938?atlOrigin=eyJpIjoiMGMwNDgxNzAzOTNhNDIyNjk0MmIxZWNjYWZmY2U2YjMiLCJwIjoiaiJ9" style="color: #3b73af; text-decoration: none">c14n for PrincipalName differs in behaviour for saml proxying between v4.1.6 and v4.2.0-20220404.011450-293</a> </span> </td>
</tr>
</tbody>
</table> </td>
</tr>
<tr>
<td class="email-content-main mobile-expand wrapper-special-margin" style="padding: 0; border-collapse: collapse; border-left: 1px solid #cccccc; border-right: 1px solid #cccccc; border-top: 0; border-bottom: 0; padding: 0 15px 0 16px; background-color: #ffffff; padding-top: 10px; padding-bottom: 5px" bgcolor="#ffffff">
<table class="keyvalue-table" style="border-collapse: collapse; mso-table-lspace: 0; mso-table-rspace: 0">
<tbody>
<tr>
<th style="color: #707070; font: normal 14px/20px Arial, sans-serif; text-align: left; vertical-align: top; padding: 2px 0">Issue Type:</th>
<td class="has-icon" style="padding: 0; border-collapse: collapse; font: normal 14px/20px Arial, sans-serif; padding: 2px 0 2px 5px; vertical-align: top"> <img src="cid:jira-generated-image-avatar-c5857674-a982-4490-aac0-c59b2bd45bed" height="16" width="16" border="0" align="absmiddle" alt="Bug" style="vertical-align: text-bottom"> Bug </td>
</tr>
<tr>
<th style="color: #707070; font: normal 14px/20px Arial, sans-serif; text-align: left; vertical-align: top; padding: 2px 0">Affects Versions:</th>
<td style="padding: 0; border-collapse: collapse; font: normal 14px/20px Arial, sans-serif; padding: 2px 0 2px 5px; vertical-align: top"> 4.2.0 </td>
</tr>
<tr>
<th style="color: #707070; font: normal 14px/20px Arial, sans-serif; text-align: left; vertical-align: top; padding: 2px 0">Assignee:</th>
<td style="padding: 0; border-collapse: collapse; font: normal 14px/20px Arial, sans-serif; padding: 2px 0 2px 5px; vertical-align: top"> <a class="user-hover" rel="557058:5b78efc9-1379-42cc-a3f6-56c6ea3a0007" style="color:#3b73af;; color: #3b73af; text-decoration: none" id="email_557058:5b78efc9-1379-42cc-a3f6-56c6ea3a0007" href="https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A5b78efc9-1379-42cc-a3f6-56c6ea3a0007"> Scott Cantor </a> </td>
</tr>
<tr>
<th style="color: #707070; font: normal 14px/20px Arial, sans-serif; text-align: left; vertical-align: top; padding: 2px 0">Components:</th>
<td style="padding: 0; border-collapse: collapse; font: normal 14px/20px Arial, sans-serif; padding: 2px 0 2px 5px; vertical-align: top"> Subject Canonicalization </td>
</tr>
<tr>
<th style="color: #707070; font: normal 14px/20px Arial, sans-serif; text-align: left; vertical-align: top; padding: 2px 0">Created:</th>
<td style="padding: 0; border-collapse: collapse; font: normal 14px/20px Arial, sans-serif; padding: 2px 0 2px 5px; vertical-align: top"> 07/Apr/22 11:19 PM </td>
</tr>
<tr>
<th style="color: #707070; font: normal 14px/20px Arial, sans-serif; text-align: left; vertical-align: top; padding: 2px 0">Environment:</th>
<td style="padding: 0; border-collapse: collapse; font: normal 14px/20px Arial, sans-serif; padding: 2px 0 2px 5px; vertical-align: top"> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0; margin-top: 0">Tested platforms: ubuntu20.04LTS, system openjdk</p> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0">reproduced on Centos7 as well: </p> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0">openjdk version "11.0.14.1" 2022-02-08 LTS</p> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0">OpenJDK Runtime Environment 18.9 (build 11.0.14.1+1-LTS)</p> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0">OpenJDK 64-Bit Server VM 18.9 (build 11.0.14.1+1-LTS, mixed mode, sharing)</p> </td>
</tr>
<tr>
<th style="color: #707070; font: normal 14px/20px Arial, sans-serif; text-align: left; vertical-align: top; padding: 2px 0">Priority:</th>
<td class="has-icon" style="padding: 0; border-collapse: collapse; font: normal 14px/20px Arial, sans-serif; padding: 2px 0 2px 5px; vertical-align: top"> <img src="cid:jira-generated-image-static-trivial-7d864d27-2472-42ab-949e-a9c7181d6f4c" height="16" width="16" border="0" align="absmiddle" alt="Trivial" style="vertical-align: text-bottom"> Trivial </td>
</tr>
<tr>
<th style="color: #707070; font: normal 14px/20px Arial, sans-serif; text-align: left; vertical-align: top; padding: 2px 0">Reporter:</th>
<td style="padding: 0; border-collapse: collapse; font: normal 14px/20px Arial, sans-serif; padding: 2px 0 2px 5px; vertical-align: top"> <a class="user-hover" rel="557058:d9c5b0aa-4ee5-45bd-b913-57fd7ee7e854" style="color:#3b73af;; color: #3b73af; text-decoration: none" id="email_557058:d9c5b0aa-4ee5-45bd-b913-57fd7ee7e854" href="https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3Ad9c5b0aa-4ee5-45bd-b913-57fd7ee7e854"> Chris.Phillips@canarie.ca </a> </td>
</tr>
</tbody>
</table> </td>
</tr>
<tr>
<td class="email-content-main mobile-expand issue-description-container" style="padding: 0; border-collapse: collapse; border-left: 1px solid #cccccc; border-right: 1px solid #cccccc; border-top: 0; border-bottom: 0; padding: 0 15px 0 16px; background-color: #ffffff; padding-top: 5px; padding-bottom: 10px" bgcolor="#ffffff">
<table class="text-paragraph-pattern" cellspacing="0" cellpadding="0" border="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0; mso-table-rspace: 0; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 2px">
<tbody>
<tr>
<td class="text-paragraph-pattern-container mobile-resize-text " style="padding: 0; border-collapse: collapse; padding: 0 0 10px"> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0; margin-top: 0">Hi.</p> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0">Upgrading to v4.2.0 highlights a difference in PrincipalName calculation, which was surprising and would like to know a course of action for upgrading.</p> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0">My thinking is that v4.x is not canonicalizing ‘right’ as compared to v4.2.0. – this newest is likely more accurate since it’s scoped. Notable is that it is already defined in the attribute registry as scoped since the beginning:</p>
<blockquote style="margin: 10px 0 0; border-left: 1px solid #cccccc; color: #707070; margin-left: 19px; padding: 10px 20px">
<p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0; margin-top: 0"><bean parent="shibboleth.TranscodingProperties"></p>
<p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0"> <property name="properties"></p>
<p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0"> <props merge="true"></p>
<p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0"> <prop key="id">azureName</prop></p>
<p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0"> <prop key="transcoder">SAML2ScopedStringTranscoder</prop></p>
<p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0"> <prop key="<a href="http://saml2.name" class="external-link" rel="nofollow noreferrer" style="color: #3b73af; text-decoration: none">saml2.name</a>"><a href="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name" class="external-link" rel="nofollow noreferrer" style="color: #3b73af; text-decoration: none">http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name</a></prop></p>
<p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0"> <prop key="saml2.nameFormat">urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified</prop></p>
<p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0"> <prop key="displayName.en">Name</prop></p>
<p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0"> <prop key="description.en">Azure UPN of an account expected to be scoped thus transcoded that way</prop></p>
<p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0"> </props></p>
<p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0"> </property></p>
<p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0"> </bean></p>
</blockquote> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0">My request:</p>
<ul>
<li>what should be done on upgrades to v4.2.0 for continuity purposes?
<ul>
<li>User adjustment on the ldap filter?</li>
</ul> </li>
<li>adapt the way the Principal is assigned given the scoping is now more visible in 4.2.0?</li>
</ul> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0">Thoughts welcome and recommendations on adaptation on what to apply on the current principle string in the ldap search to remove the scoping in the mean time.</p> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0">Preconditions:</p> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0">-working and current v4.1.6 IdP doing SAML proxying against Azure AD and creates canonical principalname as ‘name’ (e.g. ‘cphillips’) and then is used in attribute resolution with LDAP connector for (<b>sAMAccountName</b>=$requestContext.principalName)</p> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0">Actions taken to:</p> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0">Performed the in-place upgrade from v4.1.6 to v4.2.0-20220404.011450-293, no errors during update (as expect)</p> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0">Repeated same login test and SAML proxying resulted in a different c14n with a different principalname output.</p>
<ul>
<li>In v4.1.6 the canonicalization of the azureName attribute is ‘cphillips’</li>
<li>In v4.2.0 it results in azureName as ‘cphillips@canarie.ca’</li>
</ul>
<blockquote style="margin: 10px 0 0; border-left: 1px solid #cccccc; color: #707070; margin-left: 19px; padding: 10px 20px">
<p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0; margin-top: 0">V4.1.6 output of canonicalization ‘working’ </p>
<p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0">DEBUG [net.shibboleth.idp.authn.impl.SelectSubjectCanonicalizationFlow:100] - Profile Action SelectSubjectCanonicalizationFlow: Checking canonicalization flow c14n/attribute for applicability...<br> 2022-04-07 21:48:47,705 - 192.168.200.41 - DEBUG [net.shibboleth.idp.authn.impl.SelectSubjectCanonicalizationFlow:83] - Profile Action SelectSubjectCanonicalizationFlow: Selecting canonicalization flow c14n/attribute<br> 2022-04-07 21:48:47,707 - 192.168.200.41 - DEBUG [net.shibboleth.idp.authn.impl.AttributeSourcedSubjectCanonicalization:239] - Profile Action AttributeSourcedSubjectCanonicalization: Using attribute azureName string value cphillips as input to transforms<br> 2022-04-07 21:48:47,707 - 192.168.200.41 - DEBUG [net.shibboleth.idp.authn.AbstractSubjectCanonicalizationAction:221] - Profile Action AttributeSourcedSubjectCanonicalization: trimming whitespace of input string 'cphillips'<br> 2022-04-07 21:48:47,708 - 192.168.200.41 - DEBUG [net.shibboleth.idp.session.impl.DetectIdentitySwitch:148] - Profile Action DetectIdentitySwitch: No previous session found, nothing to do<br> 2022-04-07 21:48:47,708 - 192.168.200.41 - DEBUG [net.shibboleth.idp.authn.impl.FinalizeAuthentication:116] - Profile Action FinalizeAuthentication: Canonical principal name was established as 'cphillips'<br> 2022-04-07 21:48:47,708 - 192.168.200.41 - DEBUG [net.shibboleth.idp.authn.impl.FinalizeAuthentication:173] - Profile Action FinalizeAuthentication: Request did not have explicit authentication requirements, result is accepted<br> 2022-04-07 21:48:47,708 - 192.168.200.41 - DEBUG [net.shibboleth.idp.session.impl.UpdateSessionWithAuthenticationResult:222] - Profile Action UpdateSessionWithAuthenticationResult: Creating new session for principal cphillips<br> 2022-04-07 21:48:47,709 - 192.168.200.41 - DEBUG [net.shibboleth.idp.session.impl.StorageBackedSessionManager:551] - Created new session aca66e22de0dc3e94413296fba29755b8019c120b07c4789f032ef8cb140a87d for principal cphillips<br> 2022-04-07 21:48:47,709 - 192.168.200.41 - DEBUG [net.shibboleth.idp.session.impl.StorageBackedIdPSession:577] - Saving AuthenticationResult for flow authn/SAML in session aca66e22de0dc3e94413296fba29755b8019c120b07c4789f032ef8cb140a87d<br> 2022-04-07 21:48:47,710 - 192.168.200.41 - DEBUG [net.shibboleth.idp.attribute.resolver.impl.AttributeResolverImpl:223] - Attribute Resolver 'ShibbolethAttributeResolver': Initiating attribute resolution with label: SAML2/Redirect/SSO<br> 2022-04-07 21:48:47,710 - 192.168.200.41 - DEBUG [net.shibboleth.idp.attribute.resolver.impl.AttributeResolverImpl:441] - Attribute Resolver 'ShibbolethAttributeResolver': Resolving dependencies for 'myLDAP'<br> 2022-04-07 21:48:47,710 - 192.168.200.41 - DEBUG [net.shibboleth.idp.attribute.resolver.impl.AttributeResolverImpl:450] - Attribute Resolver 'ShibbolethAttributeResolver': Finished resolving dependencies for 'myLDAP'<br> 2022-04-07 21:48:47,710 - 192.168.200.41 - DEBUG [net.shibboleth.idp.attribute.resolver.impl.AttributeResolverImpl:396] - Attribute Resolver 'ShibbolethAttributeResolver': Resolving data connector myLDAP<br> 2022-04-07 21:48:47,712 - 192.168.200.41 - DEBUG [net.shibboleth.idp.attribute.resolver.dc.ldap.TemplatedExecutableSearchFilterBuilder:214] - Template text (sAMAccountName=$requestContext.principalName) yields (sAMAccountName=cphillips)</p>
</blockquote> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0">Post upgrade, this canonicalization occurs:</p>
<blockquote style="margin: 10px 0 0; border-left: 1px solid #cccccc; color: #707070; margin-left: 19px; padding: 10px 20px">
<p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0; margin-top: 0">V4.2.0 output of canonicalization but not working similarly:</p>
<p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0">(suppressed some data fields, but not ‘azureName’</p>
<p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0">2022-04-07 19:20:03,502 - 192.168.56.1 - DEBUG [net.shibboleth.idp.attribute.resolver.impl.AttributeResolverImpl:465] - Attribute Resolver 'ShibbolethAttributeResolver': Resolving dependencies for 'passthroughAttributes'<br> 2022-04-07 19:20:03,502 - 192.168.56.1 - DEBUG [net.shibboleth.idp.attribute.resolver.impl.AttributeResolverImpl:474] - Attribute Resolver 'ShibbolethAttributeResolver': Finished resolving dependencies for 'passthroughAttributes'<br> 2022-04-07 19:20:03,503 - 192.168.56.1 - DEBUG [net.shibboleth.idp.attribute.resolver.impl.AttributeResolverImpl:420] - Attribute Resolver 'ShibbolethAttributeResolver': Resolving data connector passthroughAttributes<br> 2022-04-07 19:20:03,503 - 192.168.56.1 - DEBUG [net.shibboleth.idp.attribute.resolver.dc.impl.SubjectDataConnector:206] - Data Connector 'passthroughAttributes': Extracted 9 IdPAttribute(s)<br> 2022-04-07 19:20:03,503 - 192.168.56.1 - DEBUG [net.shibboleth.idp.attribute.resolver.AbstractDataConnector:225] - Data Connector 'passthroughAttributes': produced the following 9 attributes during resolution [azureObjectidentifier, azureIdentityprovider, azureGivenname, azureAuthnmethodsreferences, azureDisplayname, azureName, azureTenantid, azureEmailaddress, azureSurname]<br> 2022-04-07 19:20:03,504 - 192.168.56.1 - DEBUG [net.shibboleth.idp.attribute.resolver.AbstractDataConnector:229] - Data Connector 'passthroughAttributes': Attribute 'azureObjectidentifier': Values '[StringAttributeValue{value=SUPPRESED}]'<br> 2022-04-07 19:20:03,504 - 192.168.56.1 - DEBUG [net.shibboleth.idp.attribute.resolver.AbstractDataConnector:229] - Data Connector 'passthroughAttributes': Attribute 'azureIdentityprovider': Values '[StringAttributeValue{value=<span class="error">[SUPPRESED}]</span>'|https://sts.windows.net/1cf546ed-f2c8-46ea-b122-2340e67b37a0/%7D%5D']<br> 2022-04-07 19:20:03,504 - 192.168.56.1 - DEBUG [net.shibboleth.idp.attribute.resolver.AbstractDataConnector:229] - Data Connector 'passthroughAttributes': Attribute 'azureGivenname': Values '[StringAttributeValue{value=Chris}]'<br> 2022-04-07 19:20:03,505 - 192.168.56.1 - DEBUG [net.shibboleth.idp.attribute.resolver.AbstractDataConnector:229] - Data Connector 'passthroughAttributes': Attribute 'azureAuthnmethodsreferences': Values '[StringAttributeValue{value=<a href="http://schemas.microsoft.com/ws/2008/06/identity/authenticationmethod/unspecified}" class="external-link" rel="nofollow noreferrer" style="color: #3b73af; text-decoration: none">http://schemas.microsoft.com/ws/2008/06/identity/authenticationmethod/unspecified}</a>'|http://schemas.microsoft.com/ws/2008/06/identity/authenticationmethod/unspecified%7D%5D']<br> 2022-04-07 19:20:03,505 - 192.168.56.1 - DEBUG [net.shibboleth.idp.attribute.resolver.AbstractDataConnector:229] - Data Connector 'passthroughAttributes': Attribute 'azureDisplayname': Values '[StringAttributeValue{value=Chris Phillips}]'<br> 2022-04-07 19:20:03,505 - 192.168.56.1 - DEBUG [net.shibboleth.idp.attribute.resolver.AbstractDataConnector:229] - Data Connector 'passthroughAttributes': Attribute 'azureName': Values '[ScopedStringAttributeValue{value=cphillips, <a href="http://scope=canarie.ca" class="external-link" rel="nofollow noreferrer" style="color: #3b73af; text-decoration: none">scope=canarie.ca</a>}]'<br> 2022-04-07 19:20:03,506 - 192.168.56.1 - DEBUG [net.shibboleth.idp.attribute.resolver.AbstractDataConnector:229] - Data Connector 'passthroughAttributes': Attribute 'azureTenantid': Values '[StringAttributeValue{value=SUPPRESSED}]'<br> 2022-04-07 19:20:03,506 - 192.168.56.1 - DEBUG [net.shibboleth.idp.attribute.resolver.AbstractDataConnector:229] - Data Connector 'passthroughAttributes': Attribute 'azureEmailaddress': Values '[StringAttributeValue{value=Chris.Phillips@canarie.ca}]'<br> 2022-04-07 19:20:03,506 - 192.168.56.1 - DEBUG [net.shibboleth.idp.attribute.resolver.AbstractDataConnector:229] - Data Connector 'passthroughAttributes': Attribute 'azureSurname': Values '[StringAttributeValue{value=Phillips}]'<br> 2022-04-07 19:20:03,507 - 192.168.56.1 - DEBUG [net.shibboleth.idp.attribute.resolver.impl.AttributeResolverImpl:443] - Attribute Resolver 'ShibbolethAttributeResolver': Data connector 'passthroughAttributes' resolved the following attributes: [azureObjectidentifier, azureIdentityprovider, azureGivenname, azureAuthnmethodsreferences, azureDisplayname, azureName, azureTenantid, azureEmailaddress, azureSurname]<br> 2022-04-07 19:20:03,507 - 192.168.56.1 - DEBUG [net.shibboleth.idp.attribute.resolver.impl.AttributeResolverImpl:465] - Attribute Resolver 'ShibbolethAttributeResolver': Resolving dependencies for 'myLDAP'<br> 2022-04-07 19:20:03,508 - 192.168.56.1 - DEBUG [net.shibboleth.idp.attribute.resolver.impl.AttributeResolverImpl:474] - Attribute Resolver 'ShibbolethAttributeResolver': Finished resolving dependencies for 'myLDAP'<br> 2022-04-07 19:20:03,508 - 192.168.56.1 - DEBUG [net.shibboleth.idp.attribute.resolver.impl.AttributeResolverImpl:420] - Attribute Resolver 'ShibbolethAttributeResolver': Resolving data connector myLDAP<br> 2022-04-07 19:20:03,511 - 192.168.56.1 - DEBUG [net.shibboleth.idp.attribute.resolver.dc.ldap.TemplatedExecutableSearchFilterBuilder:214] - Template text (sAMAccountName=$requestContext.principalName) yields (<a href="mailto:sAMAccountName=cphillips@canarie.ca" class="external-link" rel="nofollow noreferrer" style="color: #3b73af; text-decoration: none">sAMAccountName=cphillips@canarie.ca</a>)</p>
</blockquote> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0">thanks in advance as always.</p> </td>
</tr>
</tbody>
</table> </td>
</tr>
<tr>
<td class="email-content-main mobile-expand " style="padding: 0; border-collapse: collapse; border-left: 1px solid #cccccc; border-right: 1px solid #cccccc; border-top: 0; border-bottom: 0; padding: 0 15px 0 16px; background-color: #ffffff" bgcolor="#ffffff"> <script type="application/ld+json">
{
"@context": "http://schema.org",
"@type": "EmailMessage",
"description": "View Issue",
"potentialAction": {
"@type": "ViewAction",
"target": "https://shibboleth.atlassian.net/browse/IDP-1938?inbox=true&",
"name": "View Issue"
},
"publisher": {
"@type": "Organization",
"name": "Atlassian",
"url": "https://www.atlassian.com"
}
}
</script>
<table id="actions-pattern" cellspacing="0" cellpadding="0" border="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0; mso-table-rspace: 0; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 1px">
<tbody>
<tr>
<td id="actions-pattern-container" valign="middle" style="padding: 0; border-collapse: collapse; padding: 10px 0 10px 24px; vertical-align: middle; padding-left: 0">
<table align="left" style="border-collapse: collapse; mso-table-lspace: 0; mso-table-rspace: 0">
<tbody>
<tr>
<td class="actions-pattern-action-icon-container" style="padding: 0; border-collapse: collapse; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 0; vertical-align: middle"> <a href="https://shibboleth.atlassian.net/browse/IDP-1938#add-comment?atlOrigin=eyJpIjoiMGMwNDgxNzAzOTNhNDIyNjk0MmIxZWNjYWZmY2U2YjMiLCJwIjoiaiJ9" target="_blank" title="Add Comment" style="color: #3b73af; text-decoration: none"> <img class="actions-pattern-action-icon-image" src="cid:jira-generated-image-static-comment-icon-ac087e7c-94e2-4ba5-9baf-d73178eec171" alt="Add Comment" title="Add Comment" height="16" width="16" border="0" style="vertical-align: middle"> </a> </td>
<td class="actions-pattern-action-text-container" style="padding: 0; border-collapse: collapse; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 4px; padding-left: 5px"> <a href="https://shibboleth.atlassian.net/browse/IDP-1938#add-comment?atlOrigin=eyJpIjoiMGMwNDgxNzAzOTNhNDIyNjk0MmIxZWNjYWZmY2U2YjMiLCJwIjoiaiJ9" target="_blank" title="Add Comment" style="color: #3b73af; text-decoration: none">Add Comment</a> </td>
</tr>
</tbody>
</table> </td>
</tr>
</tbody>
</table> </td>
</tr> <!-- there needs to be content in the cell for it to render in some clients -->
<tr>
<td class="email-content-rounded-bottom mobile-expand" style="padding: 0; border-collapse: collapse; color: #ffffff; padding: 0 15px 0 16px; height: 5px; line-height: 5px; background-color: #ffffff; border-top: 0; border-left: 1px solid #cccccc; border-bottom: 1px solid #cccccc; border-right: 1px solid #cccccc; border-bottom-right-radius: 5px; border-bottom-left-radius: 5px; mso-line-height-rule: exactly" height="5" bgcolor="#ffffff"> </td>
</tr>
</tbody>
</table> </td>
</tr>
<tr>
<td id="footer-pattern" style="padding: 0; border-collapse: collapse; padding: 12px 20px">
<table id="footer-pattern-container" cellspacing="0" cellpadding="0" border="0" style="border-collapse: collapse; mso-table-lspace: 0; mso-table-rspace: 0">
<tbody>
<tr>
<td id="footer-pattern-mobile-separated-links" class="mobile-resize-text" width="100%" colspan="2" style="padding: 0; border-collapse: collapse; color: #999999; font-size: 12px; line-height: 18px; font-family: Arial, sans-serif; mso-line-height-rule: exactly; mso-text-raise: 2px"> Get Jira notifications on your phone! Download the Jira Cloud app for <a href="https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&referrer=utm_source%3DNotificationLink%26utm_medium%3DEmail" style="color: #3b73af; text-decoration: none">Android</a> or <a href="https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailNotificationLink&mt=8" style="color: #3b73af; text-decoration: none">iOS</a>
<hr> </td>
</tr>
<tr>
<td id="footer-pattern-text" class="mobile-resize-text" width="100%" style="padding: 0; border-collapse: collapse; color: #999999; font-size: 12px; line-height: 18px; font-family: Arial, sans-serif; mso-line-height-rule: exactly; mso-text-raise: 2px"> This message was sent by Atlassian Jira <span id="footer-build-information">(v1001.0.0-SNAPSHOT#100198-<span title="943baf4bc7a52b799e6356a7ae8d20d1e8b166ce" data-commit-id="943baf4bc7a52b799e6356a7ae8d20d1e8b166ce}">sha1:943baf4</span>)</span> </td>
<td id="footer-pattern-logo-desktop-container" valign="top" style="padding: 0; border-collapse: collapse; padding-left: 20px; vertical-align: top">
<table style="border-collapse: collapse; mso-table-lspace: 0; mso-table-rspace: 0">
<tbody>
<tr>
<td id="footer-pattern-logo-desktop-padding" style="padding: 0; border-collapse: collapse; padding-top: 3px; opacity: 0.150"> <img id="footer-pattern-logo-desktop" src="cid:jira-generated-image-static-footer-desktop-logo-ea66c6ef-ee7d-46b9-a81d-db3dab81a232" alt="Atlassian logo" title="Atlassian logo" width="192" height="24" class="image_fix"> </td>
</tr>
</tbody>
</table> </td>
</tr>
</tbody>
</table> </td>
</tr>
</tbody>
</table>
</body>
</html>