eduPersonScopedAffiliation not mapping correctly

[Scott Klawitter]

Can someone confirm this for me? I am hoping that I am answering my own
question correctly!

> I need help figuring out why an institution is not mapping the
> eduPersonScopedAffiliation attribute correctly. 

I think it is because XML attributes are missing from the Attribute and
AttributeValue nodes. 

NOTE: This snippet is from a SAML 2.0 response.

>     <saml:AttributeStatement>
>       <saml:Attribute Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.9">
>         <saml:AttributeValue
>                xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">
>                      member at cebas.csic.es
>         </saml:AttributeValue>
>       </saml:Attribute>
>     </saml:AttributeStatement>


I propose the following changes: 
- Modify saml:Attribute node to include:
    FriendlyName="eduPersonScopedAffiliation"
    NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"
- Modify saml:AttributeValue node to remove:
    xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion"
- Modify saml:AttributeValue node to include:
    xmlns:xs="http://www.w3.org/2001/XMLSchema"
    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    xsi:type="xs:string"

Will having the Identity Provider changing the format to look like the
following fix this?

<saml:AttributeStatement>
  <saml:Attribute 
                   FriendlyName="eduPersonScopedAffiliation"
                   Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.9"
 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">

    <saml:AttributeValue
                  xmlns:xs="http://www.w3.org/2001/XMLSchema" 
                  xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
                  xsi:type="xs:string">
                  member at cebas.csic.es
    </saml:AttributeValue>
  </saml:Attribute>
</saml:AttributeStatement>

Thank you in advance!

- Scott Klawitter