SP: making a saml attribute out of a header

[Marc Boorshtein]

That puts me in the right direction, thanks.

This might be a dumb question, but is there a way to tell shib to put all
attributes as headers?
On Sep 27, 2012 4:17 PM, "Cantor, Scott" <cantor.2 at osu.edu> wrote:

> On 9/27/12 3:26 PM, "Marc Boorshtein" <mboorshtein at gmail.com> wrote:
> >            <saml2:NameID
> >Format="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified">jjackson</s
> >aml2:NameID>
>
> Well, that's not mapped by default.
>
> And...
>
> >            <saml2:Attribute
> >Name="urn:mace:dir:attribute-def:eduPersonPrincipalName">
>
> And that's missing the proper NameFormat for EPPN and isn't named
> properly, that's the SAML 1.1 name rather than the OID-formed SAML 2 name.
>
>
> >                                      >jjackson</saml2:AttributeValue>
>
> And lastly it's invalid anyway, since there's no right-hand-side (the
> @scope part).
>
> The SP is quite forgiving about some things, so the incorrect name and
> name format aren't actually killing you, but the value being invalid is,
> as it logged for you.
>
> -- Scott
>
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20120927/4d8f4768/attachment.html