Google Apps integration
Peter Schober
peter.schober at univie.ac.at
Wed Dec 21 17:02:43 GMT 2011
* Daniel A. Ramaley <daniel.ramaley at drake.edu> [2011-12-21 17:49]:
> But, when i log into Test Shib Two, i don't see the mailuid being
> passed. Any ideas what i screwed up?
Some common steps:
First have a look at your IdP logs to make sure you actually sent the
attribute (idp-audit.log, the format is explained in the
documentation).
Then check https://sp.testshib.org/Shibboleth.sso/Session after
logging in to TestShib, to see what the Shib SP there successfully
mapped.
Finally, TestShib won't have a mapping rule for the specific attribute
you sent (since it's not a standard attribute but from your own
namespace) and hence doesn't know what to do with it.
* James Bardin <jbardin at bu.edu> [2011-12-21 17:55]:
> On Wed, Dec 21, 2011 at 11:48 AM, Daniel A. Ramaley
> <daniel.ramaley at drake.edu> wrote:
> > Hello again. Thank you to those who offered some advice when i posted
> > last week. Since then i've backtracked just a bit and have been trying
> > to learn more about releasing attributes.
>
> Google doesn't ready any attributes, only the Subject NameID. That's
> where you need to put the username or email.
Yes, so the next step would either be to put the value of your mailuid
attribute into some standard attribute so make sure it's being mapped
properly at TestShib, or to attach a NameID encoder to it (as
described in the documentation and can be seen in the attribute
resolver examples) and send it to the Google SP.
-peter
More information about the users
mailing list