adding attributes to attribute map
Justin Russo
justin9 at ymail.com
Tue Jul 2 15:19:58 EDT 2013
Hi,
I'm new to shibboleth and finally installed the service and the idp authentication is working.
I'm more concerned about the attributes the idb provides through saml like the first name, last name etc.
in my shib.log i see the attributes sent by the idp as below :
<ns2:Attribute Name="https://federation.company.org/person/FirstName" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
<ns2:AttributeValue>Justin</ns2:AttributeValue>
</ns2:Attribute>
<ns2:Attribute Name="https://federation.company.org/person/LastName" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
<ns2:AttributeValue>King</ns2:AttributeValue>
</ns2:Attribute>
I obviously cannot see them on the browser header request as i havent added them to the attribute-map.xml provided by shibboleth.
now i added the below to attribute-map.xml file :
<Attribute Name="https://federation.company.org/person/FirstName" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" id="First_Name">
</Attribute>
<Attribute Name="https://federation.company.org/person/LastName" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" id="Last_Name">
</Attribute>
I still dont see anything on the browser header request. I possibly dont need a decoder as the data being sent is in simple string format.
am i doing something wrong here.
thanks and appreciate your time.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130702/88b8e685/attachment-0001.html
More information about the users
mailing list