nameID attribute not showing up in SP request

[Stein, Eric]

Nope, using a NameID AttributeDecoder with a format of formatter="$Name" didn't work. :-( 
Any other thoughts?

Eric

-----Original Message-----
From: Stein, Eric 
Sent: Monday, June 24, 2013 2:21 PM
To: Shib Users
Subject: RE: nameID attribute not showing up in SP request

Thanks, Scott. I found the relevant documentation. I do have a follow-up question, though. The incoming value is in the format "uid=XXXXX", and there's a strong likelihood of other information being put in there also. It looks like the "expected" format for the nameID decoders is an email address, and the documentation talks about splitting on @ to determine the name and the scope or the name and the name qualifier. It doesn't seem like that's appropriate to the format that my name is coming in as.

Now, I've had no say on the format of the nameID.  I may or may not be able to force a change of that format. Is what we're doing wildly wrong in SAML land? If not, I guess I should be using the NameID AttributeDecoder with a format of formatter="$Name"? I think that should just pass the whole thing through as a flat string. Is that right?

Thanks,
Eric

-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Cantor, Scott
Sent: Monday, June 24, 2013 2:01 PM
To: Shib Users
Subject: Re: nameID attribute not showing up in SP request

On 6/24/13 1:57 PM, "Stein, Eric" <steine at locustec.com> wrote:

>Okay, so the nameID is not present in the information shown by 
>/Shibboleth.sso/Session. So I somehow screwed up the shibboleth 
>configuration?

>In attribute-map.xml I added:
>       <Attribute
>name="urn:oasis:names:tc:SAML:1.1:nameid-format:X509SubjectName"
>id="nameid">
>           <AttributeDecoder xsi:type="StringAttributeDecoder"/>
>        </Attribute>

I didn't spot it, you want the NameID decoder, not the String decoder.
Those aren't strings, they're NameID elements.

See the example for the persistent format.

-- Scott


--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net