Attribute question

Peter Schober peter.schober at univie.ac.at
Fri Nov 4 19:21:37 GMT 2011


* Mike Flynn <shibbolethlynda at yahoo.com> [2011-11-04 20:19]:
> <saml:Attribute Name="EPPN" 
> NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"><saml:AttributeValue
> xsi:type="xs:string">hermanw at qualcomm.com</saml:AttributeValue></saml:Attribute>
> 
> So it *looks* like it is being passed...
> 
> Can anyone shed light on why it is not getting through?

"Basic" attribute names are:
1. Not recommended (because there usually is no specification of
   syntax or semantics)
2. Not mapped by default in the Shib SP, but before you do consider:
3. Not legal for eduPerson-defined attributes. The only legal way to
   represent this attribute is specified in the MACE-Dir SAML
   Attribute Profiles. In short for most attributes this means using
   URI name format and urn:oid: attribute names.
-peter


More information about the users mailing list