Attribute question

[Mike Flynn]

Thanks, Nate.


________________________________
 From: Nate Klingenstein <ndk at internet2.edu>
To: Shib Users <users at shibboleth.net> 
Sent: Monday, February 11, 2013 12:46 PM
Subject: Re: Attribute question
 

Mike, 

NameFormat, the other component of attribute naming, defaults on the wire to unspecified and in attribute-map.xml to URI.  Either they'll need to add URI declarations to their attributes -- preferred, since they're actually using the correct URI's, interestingly enough -- or you'll need to set up mappings for the unspecified type.

https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPAttributeResolver

urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified

Thanks,
Nate.


On 11 Feb 2013, at 20:25, Mike Flynn <shibbolethlynda at yahoo.com>
 wrote:

Back to my Oracle friends and their LEARN system...
>
>
>I get a session just fine but no attributes get passed.  They send this:
>
>
><saml:AttributeStatement>
><saml:Attribute Name="urn:oid:2.5.4.3" id="cn" friendlyName="cn">
><saml:AttributeValue>LEARNSUPPORT</saml:AttributeValue>
></saml:Attribute>
><saml:Attribute Name="urn:oid:2.5.4.4" id="sn" friendlyName="sn">
><saml:AttributeValue>Support</saml:AttributeValue>
></saml:Attribute>
></saml:Attribute><saml:Attribute Name="urn:oid:2.5.4.42" id="givenName" friendlyName="givenName">
><saml:AttributeValue>Learn</saml:AttributeValue>
></saml:Attribute>
><saml:Attribute Name="urn:oid:0.9.2342.19200300.100.1.3" id="mail" friendlyName="mail">
><saml:AttributeValue>someone at somedomain.com</saml:AttributeValue>
></saml:Attribute>
></saml:AttributeStatement>
>
>
>I have the default definitions for these:
>
>
>   <Attribute name="urn:oid:2.5.4.3" id="cn"/>
>    <Attribute name="urn:oid:2.5.4.4" id="sn"/>
>    <Attribute name="urn:oid:2.5.4.42" id="givenName"/>
>    <Attribute name="urn:oid:0.9.2342.19200300.100.1.3" id="mail"/>
>Session page on my SP shows a valid session but no attributes.  What am I missing here?
--
>To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net

--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130211/2084adb5/attachment.html