IDP - AtrtibuteResolver - how to map a customAtrribute to Standard SAML attribute

[David Bantz]

That's return attributes, not address.  It's the space delimited list of attributes you want returned and it is an optional element.  I don't use it and it doesn't seem to be doing anything for you (I'm guessing * is everything tho that's not stated in the Shibb wiki).

The DataConnector definition has to be OK if it works to return pvid as the value of empID from that directory.

If you're sure the spaces in the definition in your email are not there in the attribute-resolver, then you need to turn up the logging level to debug and look in the idp-process log for the attributes returned and encoded following authentication.

David Bantz

On Mon, 5 Aug 2013, at 16:50 , "Vignesh, Vanna G." <vignesh at musc.edu> wrote:

> There is no space in it. Sorry. I might have entered a space by mistake when i copy pasted the code. Could it be due to dataconnector? I have a ldap dc and it looks like this. 
> 
>     <resolver:DataConnector id="AuthLDAP" xsi:type="dc:LDAPDirectory" 
>         ldapURL="ldaps://********" 
>         baseDN="****" 
>         principal="****" 
>         principalCredential="****">
>         <dc:FilterTemplate>
>             
>         </dc:FilterTemplate>
>         <dc:ReturnAttributes>* entryDN</dc:ReturnAttributes>
>     </resolver:DataConnector>
> 
> Return address has * entryDN. What does that mean?
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130805/f77d9873/attachment.html