passing eduPersonScopedAffiliation question.

Mike Flynn shibbolethlynda at yahoo.com
Thu Sep 27 10:12:08 EDT 2012


As an SP I have lots of schools that pass this to me.  The default Shib definitions have always worked.  I have a school that is trying to pass this to me but it is not getting to me.

They pass it like this:

      <saml2:Attribute FriendlyName="eduPersonScopedAffiliation" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.9" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
         <saml2:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">employee at someschool.edu</saml2:AttributeValue>
      </saml2:Attribute>

My definition looks like this:

    <Attribute name="urn:mace:dir:attribute-def:eduPersonScopedAffiliation" id="affiliation">
        <AttributeDecoder xsi:type="ScopedAttributeDecoder" caseSensitive="false"/>
    </Attribute>
    <Attribute name="urn:oid:1.3.6.1.4.1.5923.1.1.1.9" id="affiliation">
        <AttributeDecoder xsi:type="ScopedAttributeDecoder" caseSensitive="false"/>
    </Attribute>

Do I need to add NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" to my definition?

Thanks!
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20120927/de5d61d6/attachment.html 


More information about the users mailing list