passing eduPersonScopedAffiliation question.

[Mike Flynn]

Looking at the log I see this:

2012-09-26 19:07:40 WARN Shibboleth.AttributeFilter [115]: removed value at position (0) of attribute (affiliation) from (http://someentityid.edu)
2012-09-26 19:07:40 WARN Shibboleth.AttributeFilter [115]: removed value at position (1) of attribute (affiliation) from (http://someentityid.edu)
2012-09-26 19:07:40 WARN Shibboleth.AttributeFilter [115]: no values left, removing attribute (affiliation) from (http://someentityid.edu)

I am indeed federating one on one.  What kind of filter rule would I need to define for this?


________________________________
 From: "Cantor, Scott" <cantor.2 at osu.edu>
To: Shib Users <users at shibboleth.net> 
Sent: Thursday, September 27, 2012 7:27 AM
Subject: Re: passing eduPersonScopedAffiliation question.
 
On 9/27/12 10:12 AM, "Mike Flynn" <shibbolethlynda at yahoo.com> wrote:

>As an SP I have lots of schools that pass this to me.  The default Shib
>definitions have always worked.  I have a school that is trying to pass
>this to me but it is not getting to me.

Most likely their metadata has no Scope extension for "someschool.edu".
There should be log messages indicating it's being filtered, that's why.

>Do I need to add 
>NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" to my
>definition?

No.

If you're federating with them one on one, then you might have to create
custom filtering rules for their scoped attributes unless you choose to
manipulate the metadata to add the extension there.

-- Scott


--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20120927/c63bacde/attachment.html