adding attributes to attribute map

Justin Russo justin9 at ymail.com
Tue Jul 2 15:19:58 EDT 2013


Hi,
I'm new to shibboleth and finally installed the service and the idp authentication is working.
I'm more concerned about the attributes the idb provides through saml like the first name, last name etc.

in my shib.log i see the attributes sent by the idp as below :

<ns2:Attribute Name="https://federation.company.org/person/FirstName" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">

                <ns2:AttributeValue>Justin</ns2:AttributeValue>

            </ns2:Attribute>

            <ns2:Attribute Name="https://federation.company.org/person/LastName" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">

                <ns2:AttributeValue>King</ns2:AttributeValue>

            </ns2:Attribute>

I obviously cannot see them on the browser header request as i havent added them to the attribute-map.xml provided by shibboleth.
now i added the below to attribute-map.xml file :

<Attribute Name="https://federation.company.org/person/FirstName" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" id="First_Name">
</Attribute>
<Attribute Name="https://federation.company.org/person/LastName" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" id="Last_Name">
</Attribute>

I still dont see anything on the browser header request. I possibly dont need a decoder as the data being sent is in simple string format.

am i doing something wrong here.

thanks and appreciate your time.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130702/88b8e685/attachment-0001.html 


More information about the users mailing list