Skipping unmapped SAML 2.0 Attribute with Name

Sat Jun 29 05:17:40 EDT 2013

Hello All,

When I am trying to print all the (request.getHeaders) I am getting the
below values.

output on Page.

host: 192.168.3.213

connection: keep-alive

Cache-Control: max-age=0

accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8

user-agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like
Gecko) Chrome/27.0.1453.116 Safari/537.36

referer: https://127.0.0.1:8443/idp/profile/SAML2/Redirect/SSO

accept-encoding: gzip,deflate,sdch

accept-language: en-US,en;q=0.8

cookie: JSESSIONID=98FB0973FE5491AB78D6D1723D9A4C6C;
_shibsession_64656661756c7468747470733a2f2f3139322e3136382e332e3231332f53686
962626f6c6574682e73736f2f4d65746164617461=_bfd140bd137d9a5c630b793029f16ea9

Shib-Cookie-Name: 

Shib-Session-ID: _bfd140bd137d9a5c630b793029f16ea9

Shib-Session-Index:
0fa2b3d37ca87ad1f00d6c8f45c4b205c5813d18d43715277d5a7a0b665ec22b

Shib-Identity-Provider: https://127.0.0.1:8443/idp/shibboleth

Shib-Authentication-Method:
urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport

Shib-Authentication-Instant: 2013-06-29T08:51:06.181Z

Shib-AuthnContext-Class:
urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport

Shib-AuthnContext-Decl: 

Shib-Assertion-Count: 

eppn: 

affiliation: 

unscoped-affiliation: 

entitlement: 

targeted-id: 

persistent-id: 

cn: 

sn: 

mail: 

Shib-Application-ID: default

REMOTE_USER:

Attribute-map.xml (I even tried value in nameFormat as "
urn:oasis:names:tc:SAML:2.0:attrname-format:uri ")

<Attribute name="cn"
nameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified"
id="cn"/>

<Attribute name="sn"
nameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified"
id="sn"/>

<Attribute name="mail"
nameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified"
id="mail"/>

Value in Assertion Certificate

   <saml2:AttributeStatement>

      <saml2:Attribute Name="mail"
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">

         <saml2:AttributeValue
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:type="xs:string">ravim at fcsjpr.com</saml2:AttributeValue>

      </saml2:Attribute>

      <saml2:Attribute Name="sn"
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">

         <saml2:AttributeValue
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:type="xs:string">Meharde</saml2:AttributeValue>

      </saml2:Attribute>

      <saml2:Attribute Name="cn"
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">

         <saml2:AttributeValue
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:type="xs:string">Ravi Meharde</saml2:AttributeValue>

      </saml2:Attribute>

   </saml2:AttributeStatement>

Shib.log

2013-06-29 14:44:43 INFO Shibboleth.AttributeExtractor.XML [62]: skipping
unmapped SAML 2.0 Attribute with Name: mail

2013-06-29 14:44:43 INFO Shibboleth.AttributeExtractor.XML [62]: skipping
unmapped SAML 2.0 Attribute with Name: sn

2013-06-29 14:44:43 INFO Shibboleth.AttributeExtractor.XML [62]: skipping
unmapped SAML 2.0 Attribute with Name: cn

2013-06-29 14:44:43 INFO Shibboleth.SessionCache [62]: new session created:
ID (_06d76501617c1f763e3f7c3807156f3e) IdP
(https://127.0.0.1:8443/idp/shibboleth)
Protocol(urn:oasis:names:tc:SAML:2.0:protocol) Address (192.168.3.213)

Transaction.log

2013-06-29 14:44:43 INFO Shibboleth-TRANSACTION [62]: New session (ID:
_06d76501617c1f763e3f7c3807156f3e) with (applicationId: default) for
principal from (IdP: https://127.0.0.1:8443/idp/shibboleth) at
(ClientAddress: 192.168.3.213) with (NameIdentifier:
_08a5651ae2c940c9938726bb9cd2e365) using (Protocol:
urn:oasis:names:tc:SAML:2.0:protocol) from (AssertionID:
_ebf9463b8c695e97bbe942484eb8334f)

2013-06-29 14:44:43 INFO Shibboleth-TRANSACTION [62]: Cached the following
attributes with session (ID: _06d76501617c1f763e3f7c3807156f3e) for
(applicationId: default) {

2013-06-29 14:44:43 INFO Shibboleth-TRANSACTION [62]: }

Guys, can any one please tell me whats wrong am I doing.

Kindly help.

Thanks and Regards

Saurabh Tyagi

From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On
Behalf Of Saurabh Tyagi
Sent: Saturday, June 29, 2013 11:20 AM
To: 'Shib Users'
Subject: Skipping unmapped SAML 2.0 Attribute with Name

Hello Friends,

I am fetching some attributes from Idp to SP.

idp-process.logs

   <saml2:AttributeStatement>

      <saml2:Attribute Name="mail"
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">

         <saml2:AttributeValue
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:type="xs:string">ravim at fcsjpr.com</saml2:AttributeValue>

      </saml2:Attribute>

      <saml2:Attribute Name="sn"
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">

         <saml2:AttributeValue
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:type="xs:string">Meharde</saml2:AttributeValue>

      </saml2:Attribute>

      <saml2:Attribute Name="cn"
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">

         <saml2:AttributeValue
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:type="xs:string">Ravi Meharde</saml2:AttributeValue>

      </saml2:Attribute>

   </saml2:AttributeStatement>

But at shibd.log iam getting skipping unmapped SAML 2.0 Attribute with Name

Shibd.log

2013-06-29 11:05:14 INFO Shibboleth.AttributeExtractor.XML [42]: skipping
unmapped SAML 2.0 Attribute with Name: mail

2013-06-29 11:05:14 INFO Shibboleth.AttributeExtractor.XML [42]: skipping
unmapped SAML 2.0 Attribute with Name: sn

2013-06-29 11:05:14 INFO Shibboleth.AttributeExtractor.XML [42]: skipping
unmapped SAML 2.0 Attribute with Name: cn

can any one please tell whats wrong am I doing or how to resolve it ?

Thanks and Regards

Saurabh Tyagi

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130629/20eb5cbf/attachment.html 