Fetch Attributes From SAML IdP

[David Bantz]

Your attribute definitions indicate the ldap source attribute, but you also need to include an encoder in the definition (encode the value into appropriate form for SAML).

Look in the default distribution file for some examples including the mail attribute.

David Bantz

On Thu, 27 Jun 2013, at 04:08 , "Saurabh Tyagi" <saurabh.tyagi at thepsi.com> wrote:

> Hello,
>  
> Can any please confirm if I am doing correct?
>  
> Thanks and Regards
> Saurabh Tyagi
>  
> From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Saurabh Tyagi
> Sent: Thursday, June 27, 2013 4:40 PM
> To: 'Shib Users'
> Subject: Fetch Attributes From SAML IdP
>  
> Hello Friends,
>  
> I am trying to fetch certain values from Ldap that is connected to Idp.
> I am unable to understand how to do that. I tried reading articles.
> I have made some changes if any one of u can please confirm if I am moving in right direction.
>  
> Attribute-resolver :- (Added two fields to be fetched from Ldap)
>                 <resolver:AttributeDefinition xsi:type="ad:Simple" xmlns="urn:mace:shibboleth:2.0:attribute:encoder" id="mail" sourceAttributeID="mail">
>                     <resolver:Dependency ref="myLDAP" />
>                 </resolver:AttributeDefinition>
>  
>                 <resolver:AttributeDefinition xsi:type="ad:Simple" xmlns="urn:mace:shibboleth:2.0:attribute:encoder" id="dn" sourceAttributeID="dn">
>                     <resolver:Dependency ref="myLDAP" />
>                 </resolver:AttributeDefinition
>  
> Attribute-filter:- (In releaseTransientIdToAnyone)
>                
>                 <afp:AttributeRule attributeID="mail">
>                     <afp:PermitValueRule xsi:type="basic:ANY"/>
>                 </afp:AttributeRule>
>  
>                   <afp:AttributeRule attributeID="dn">
>                     <afp:PermitValueRule xsi:type="basic:ANY"/>
>                 </afp:AttributeRule>
>  
> Idp Process Logs are attached .
>  
> If I am working in correct direction then in Idp-process logs I am getting
> Attribute transientId was not encoded because no SAML2AttributeEncoder was attached to it.
>  
> Please help .
>  
>  
> Thanks and Regards
> Saurabh Tyagi
>  
> <idp_processlogs.txt>--
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net--
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130627/48e4af50/attachment.html