skipping unmapped SAML 2.0 Attribute with Name

Brian Reindel brian at reindel.com
Fri Jul 19 17:21:06 EDT 2013


I've been reading up on the different reasons why this occurs, and I appear
to be following all the appropriate naming conventions. This is a custom
attribute name and it uses the
urn:oasis:names:tc:SAML:2.0:attrname-format:uri nameFormat.

attribute-resolver.xml:

<resolver:AttributeDefinition xsi:type="PrincipalName"
xmlns="urn:mace:shibboleth:2.0:resolver:ad" id="userPrincipalUsername">
    <resolver:AttributeEncoder xsi:type="SAML2String"
xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
nameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" name="
https://www.example.org/attributes/username" />
</resolver:AttributeDefinition>

Assertion:

...
<saml2:AttributeStatement>
    <saml2:Attribute
        Name="https://www.example.org/attributes/username"
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
        <saml2:AttributeValue
            xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:type="xs:string">(my value is printed here)</saml2:AttributeValue>
    </saml2:Attribute>
</saml2:AttributeStatement>
...

attribute-map.xml

<Attribute name="https://www.example.org/attributes/username" id="username"
/>

I have also tried the following two formats, and neither work:

<Attribute name="urn:oasis:names:tc:SAML:2.0:attrname-format:uri:
https://www.example.org/attributes/username" id="username" />
<Attribute nameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"
name="https://www.example.org/attributes/username" id="username" />

I always end up with the following INFO message and nothing in the request
for the service provider:

2013-07-19 16:58:53 INFO Shibboleth.AttributeExtractor.XML [5]: skipping
unmapped SAML 2.0 Attribute with Name:
https://www.example.org/attributes/username
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130719/bd4fe048/attachment.html 


More information about the users mailing list