no rule found, will remove attribute (samAccountName)

[Kevin P. Foote]

On Mon, 26 Aug 2013, Saurabh Tyagi wrote:
> "no rule found, will remove attribute (samAccountName) from" in
> shibd_warn.log.
>
>
>
> While I have configured the rule in both Attribute_map.xml
>
> "<Attribute name="samAccountName"
> nameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"
> id="samAccountName"/>"

You need to map the SAML name released at the IdP to your local 
samAccountName id at the SP. Doc here [1]

This SAML name is usually some form of URI like below.. 
http://examp.org/attributes/myActiveDirAttributes/samAccountName
or an oid etc..

What SAML attribute you resolve your samAccountName to is done in the 
attribute-resolver.xml at the IdP..


It looks like you are trying to map friendlyName to your local id of
same.



[1] <https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPAddAttribute>


------
thanks
  kevin.foote