attribute push

[Chad La Joie]

If you'd like help you'll need to upgrade to a supported version.

On 4/2/12 3:35 PM, XiaoXia Dong wrote:
> Hi Shibboleth Experts,
> 
>  
> 
> We have an application which its attribute push works on campus ip
> address, but not from other internet IP addresses. We are using
> Shibboleth IdP 1.3.x and could not figure out why this is happening. 
> Could any of your guys help and point out where I may need to look for?
> Thanks.
> 
>  
> 
> The following is what the SAML assertion looks like for a try from off
> campus:
> 
> <Assertion xmlns="urn:oasis:names:tc:SAML:1.0:assertion"
> AssertionID="_62c0e0368a6da881a94eb2f113feb8da"
> IssueInstant="2012-04-02T15:33:03.668Z"
> Issuer="urn:mace:incommon:northwestern.edu <http://northwestern.edu>"
> MajorVersion="1" MinorVersion="1">
> 
>     <Conditions NotBefore="2012-04-02T15:33:03.668Z"
> NotOnOrAfter="2012-04-02T15:38:03.668Z">
> 
>       <AudienceRestrictionCondition>
> 
>        
> <Audience>https://adeassodev.northwestern.edu/simplesaml/module.php/saml/sp/metadata.php/nu_passport</Audience>
> 
>         <Audience>urn:mace:incommon</Audience>
> 
>       </AudienceRestrictionCondition>
> 
>     </Conditions>
> 
>     <AuthenticationStatement
> AuthenticationInstant="2012-04-02T15:33:03.668Z"
> AuthenticationMethod="urn:oasis:names:tc:SAML:1.0:am:unspecified">
> 
>       <Subject>
> 
>         <NameIdentifier Format="urn:mace:shibboleth:1.0:nameIdentifier"
> NameQualifier="urn:mace:incommon:northwestern.edu
> <http://northwestern.edu>">XXX</NameIdentifier>
> 
>         <SubjectConfirmation>
> 
>          
> <ConfirmationMethod>urn:oasis:names:tc:SAML:1.0:cm:bearer</ConfirmationMethod>
> 
>         </SubjectConfirmation>
> 
>       </Subject>
> 
>       <SubjectLocality IPAddress="209.114.43.98"/>
> 
>     </AuthenticationStatement>
> 
>   </Assertion>
> 
> 
> From here you could see that it missed the
> <AttributeStatement></AttributeStatement>. 
> 
>  
> 
> Thank you for any help in advance!
> 
> 
> 
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net