incorporating opensso metadata and extended metadata xml files into shibboleth SP

csross cross at hccs.com
Tue Sep 18 14:42:31 EDT 2012


Hi,

I have been trying without success to create the mapping necessary to
automatically log in to my application (SP) after authenticating with the
Opensso IDP.   When a session starts the only attribute I get back is the
persistent_id, which has the value of a url.  The UID should be coming back
but my logs are showing.   I see allot of posts that mention 'unspecified'
format but nothing I have tried to returning anything.  
---------------------------------------------------
2012-09-18 13:56:56 DEBUG Shibboleth.SSO.SAML2 [2]: extracting pushed
attributes...
2012-09-18 13:56:56 DEBUG Shibboleth.AttributeDecoder.NameID [2]: decoding
NameIDAttribute (persistent-id) from SAML 2 NameID with Format
(urn:oasis:names:tc:SAML:2.0:nameid-format:persistent)
2012-09-18 13:56:56 INFO Shibboleth.AttributeExtractor.XML [2]: skipping
unmapped SAML 2.0 Attribute with Name: uid,
Format:urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified
2012-09-18 13:56:56 DEBUG Shibboleth.AttributeFilter [2]: filtering 1
attribute(s) from (https://IDP.company.edu:443/opensso)
2012-09-18 13:56:56 DEBUG Shibboleth.AttributeFilter [2]: applying filtering
rule(s) for attribute (persistent-id) from
(https://IDP.company.edu:443/opensso)
2012-09-18 13:56:56 DEBUG Shibboleth.SSO.SAML2 [2]: resolving attributes...
----------------------------------------------------

Here are things I have tried, each individually, but the log entries are the
same.  The LDAP in the attribute-map are uncommented.   I'm using
REMOTE_USER="eppn uid persistent-id targeted-id" 
 
    <Attribute name="urn:oid:0.9.2342.19200300.100.1.1" id="uid"/>
    <Attribute name="urn:oasis:names:tc:SAML:2.0:nameid-format:unspecified"
id="
uid"/>
    <Attribute
nameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified"
name="urn:mace:dir:attribute-def:uid" id="uid"/>
    <Attribute
name=&quot;urn:oasis:names:tc:SAML:2.0:nameid-format:unspecified&quot; name
=&quot;urn:mace:dir:attribute-def:employeenumber&quot; id=&quot;uid&quot;/>

I know that the error says the attribute is unmapped and it has to be
mapped.  But nothing is working and any help in the mapping would be greatly
appreciated.

thank you.




--
View this message in context: http://shibboleth.1660669.n2.nabble.com/incorporating-opensso-metadata-and-extended-metadata-xml-files-into-shibboleth-SP-tp7581372p7581890.html
Sent from the Shibboleth - Users mailing list archive at Nabble.com.


More information about the users mailing list