Shibboleth IdP integration with Oracle 11g Identity Federation

[Cantor, Scott]

On 3/25/13 7:52 PM, "lalithj" <j_lalith at hotmail.com> wrote:

>Our Idp log also complains about an issue
>
>No attribute of principal 'xxxxxxx' can be encoded in to a NameIdentifier
>of
>required format 'urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress'
>for
>relying party 'http://clientsp:14100/oam/fed'
>10:47:25.272 - DEBUG
>[edu.internet2.middleware.shibboleth.idp.profile.AbstractSAMLProfileHandle
>r:778]
>- Encoding response to SAML request
>id-Wn0-Q5MdpBJfo3XgE6qx-tl4ST7vizDbfgnbeWGI from relying party
>http://dev15sdvt.vu.edu.au:14100/oam/fed
>
>
>What could be the reason for this error, any ideas

See the <NameIDPolicy> element in the SAML core specification. Your SP is
requiring a format your IdP doesn't have a configuration to support.

>Client log got below exception

SOAP isn't part of SSO for a commercial SP, so I have no idea what they're
doing.

-- Scott