Skipping unmapped SAML 2.0 Attribute with Name

Peter Schober peter.schober at univie.ac.at
Sat Jun 29 09:06:53 EDT 2013


* Saurabh Tyagi <saurabh.tyagi at thepsi.com> [2013-06-29 07:51]:
>    <saml2:AttributeStatement>
> 
>       <saml2:Attribute Name="mail"
> NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">

That's incorrect. "mail" is not a URI.

Again (Third time? I've lost count): The default
attribute-resolver.xml configuration has correct attribute definitions
for common attributes like "mail". Your own version of that is broken.

> 2013-06-29 11:05:14 INFO Shibboleth.AttributeExtractor.XML [42]: skipping
> unmapped SAML 2.0 Attribute with Name: mail
> 
> 2013-06-29 11:05:14 INFO Shibboleth.AttributeExtractor.XML [42]: skipping
> unmapped SAML 2.0 Attribute with Name: sn
> 
> 2013-06-29 11:05:14 INFO Shibboleth.AttributeExtractor.XML [42]: skipping
> unmapped SAML 2.0 Attribute with Name: cn
> 
> can any one please tell whats wrong am I doing or how to resolve it ?

Yes, remove your broken versions of these attribute definitions from
your attribute-resolver.xml and use the existing and working (but
commented-out) examples from that file, by all means.
-peter


More information about the users mailing list