SP: making a saml attribute out of a header

[Cantor, Scott]

On 9/27/12 3:26 PM, "Marc Boorshtein" <mboorshtein at gmail.com> wrote:
>            <saml2:NameID
>Format="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified">jjackson</s
>aml2:NameID>

Well, that's not mapped by default.

And...

>            <saml2:Attribute
>Name="urn:mace:dir:attribute-def:eduPersonPrincipalName">

And that's missing the proper NameFormat for EPPN and isn't named
properly, that's the SAML 1.1 name rather than the OID-formed SAML 2 name.


>                                      >jjackson</saml2:AttributeValue>

And lastly it's invalid anyway, since there's no right-hand-side (the
@scope part).

The SP is quite forgiving about some things, so the incorrect name and
name format aren't actually killing you, but the value being invalid is,
as it logged for you.

-- Scott