Problems getting "eppn" to be accepted by SP.

[Leonard Kroll]

Hi, I had the InCommon metadata changes so the scope is now correct.
<shibmd:Scope regexp="false">
umassb.net
</shibmd:Scope>

Any ideas on what I am doing wrong?

Scope line from InCommon.metadata:
	<shibmd:Scope regexp="false">umassb.net</shibmd:Scope>

Idp-process.log:

</saml2:Attribute>
      <saml2:Attribute FriendlyName="eppn"
Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6"
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
         <saml2:AttributeValue
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:type="xs:string">Leonard.Kroll at umassb.net</saml2:AttributeValue>
</saml2:Attribute>


Leonard Kroll
UNIX / GIS Administrator
Univ. Massachusetts Boston
Leonard(dot)Kroll(at)umb.edu
Phone: 617-287-5048
fax:      617-287-5224

-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net]
On Behalf Of Nate Klingenstein
Sent: Monday, October 17, 2011 4:02 PM
To: Shib Users
Subject: Re: Problems getting "eppn" to be accepted by SP.

Leonard,

Your problem is likely that in your metadata, as loaded by the  
EDUCAUSE SP, doesn't indicate that your IdP is authoritative for the  
umassb.net domain.  If that metadata is the InCommon metadata, it reads:

       <shibmd:Scope regexp="false">vm-shibboleth.umassb.net</ 
shibmd:Scope>

You'll need to ask InCommon to change that to umassb.net.

Take care,
Nate.

On Oct 17, 2011, at 19:51 , Leonard Kroll wrote:

> Hi, I am trying to construct the eppn attribute. I believe I have  
> done so, as leonard.kroll at umassb.net. It is included in the  
> attribute statement below. It looks correct to me, but is not  
> accepted by the EDUCause SP. Any suggestions?Hints, help J

--
To unsubscribe from this list send an email to
users-unsubscribe at shibboleth.net
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20111018/085f52ff/attachment.html