Fetch Attributes From SAML IdP

[Peter Schober]

* Saurabh Tyagi <saurabh.tyagi at thepsi.com> [2013-06-27 17:13]:
> But if u see logs 
> First ot says " Attribute transientId has 1 values after filtering "
> and in last line it says " No attributes remained after encoding and
> filtering by value, no attribute statement built ",
> 
> It should pass atleast the transientId. 

It probably does, but not in an attribute statement (a NameID is not
an ordinary attribute, on the wire).

> I was looking for an alternate.While i was stuck in this.  I changed
> includeAttributeStatement to true (xsi:type="saml:SAML2SSOProfile"
> includeAttributeStatement="true") so that I can get Ldap values as
> user loggin.

The defult of includeAttributeStatement is true for the
SAML2SSOProfile. So, again, there is nothing to change unless you
broke the configuration yourself before.

Concentrate on getting your LDAP config fixed instead. You're
interesting in passing actual data to the SP, so don't fixate on the
transientId. Chances are it will Just Work (if you restored all the
default config relating to it),
-peter