FW: Fetch Attributes From SAML IdP

[Saurabh Tyagi]

Hello,

 

Can any please confirm if I am doing correct?

 

Thanks and Regards

Saurabh Tyagi

 

From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On
Behalf Of Saurabh Tyagi
Sent: Thursday, June 27, 2013 4:40 PM
To: 'Shib Users'
Subject: Fetch Attributes From SAML IdP

 

Hello Friends,

 

I am trying to fetch certain values from Ldap that is connected to Idp.

I am unable to understand how to do that. I tried reading articles. 

I have made some changes if any one of u can please confirm if I am moving
in right direction.

 

Attribute-resolver :- (Added two fields to be fetched from Ldap)

                <resolver:AttributeDefinition xsi:type="ad:Simple"
xmlns="urn:mace:shibboleth:2.0:attribute:encoder" id="mail"
sourceAttributeID="mail">

                    <resolver:Dependency ref="myLDAP" />

                </resolver:AttributeDefinition>

 

                <resolver:AttributeDefinition xsi:type="ad:Simple"
xmlns="urn:mace:shibboleth:2.0:attribute:encoder" id="dn"
sourceAttributeID="dn">

                    <resolver:Dependency ref="myLDAP" />

                </resolver:AttributeDefinition

 

Attribute-filter:- (In releaseTransientIdToAnyone)

                

                <afp:AttributeRule attributeID="mail">

                    <afp:PermitValueRule xsi:type="basic:ANY"/>

                </afp:AttributeRule>

 

                  <afp:AttributeRule attributeID="dn">

                    <afp:PermitValueRule xsi:type="basic:ANY"/>

                </afp:AttributeRule>

 

Idp Process Logs are attached .

 

If I am working in correct direction then in Idp-process logs I am getting 

Attribute transientId was not encoded because no SAML2AttributeEncoder was
attached to it.

 

Please help .

 

 

Thanks and Regards

Saurabh Tyagi

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130627/06b45dc4/attachment.html 
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: idp_processlogs.txt
Url: http://shibboleth.net/pipermail/users/attachments/20130627/06b45dc4/attachment.txt 
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: ATT00268.txt
Url: http://shibboleth.net/pipermail/users/attachments/20130627/06b45dc4/attachment-0001.txt