help with first-time SP not releasing attributes/eppn
Rob Gorrell
rwgorrel at uncg.edu
Thu May 16 11:04:44 EDT 2013
ok, making progress. when I set up my test for displayname (unscoped attr),
I had included urn:mace:dir:attribute-def:displayName but not
urn:oid:2.16.840.1.113730.3.1.241 in my attribute-map.xml. i'm now mapping
and displaying displayName but still having problems with eppn... so i must
be related to the scoping you were talking about.
this is what I have in my IdP's metadata that i think you were referring
too:
<!-- This is a Shibboleth extension to express attribute scope rules. -->
<shibmd:Scope regexp="false"
xmlns:shibmd="urn:mace:shibboleth:metadata:1.0">
uncg.edu
</shibmd:Scope>
I am in totally unfamiliar territory now.
-Rob
On Thu, May 16, 2013 at 10:55 AM, Peter Schober
<peter.schober at univie.ac.at>wrote:
> * Rob Gorrell <rwgorrel at uncg.edu> [2013-05-16 16:37]:
> > Thats were I'm confused...
> >
> > I have in my attribute-map.xml:
> > <Attribute name="urn:mace:dir:attribute-def:eduPersonPrincipalName"
> > id="eppn">
> > <AttributeDecoder xsi:type="ScopedAttributeDecoder"/>
> > </Attribute>
> > <Attribute name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" id="eppn">
> > <AttributeDecoder xsi:type="ScopedAttributeDecoder"/>
> > </Attribute>
> >
> > shouldn't that be taking care of it?
>
> You said you (also) tried to send displayName. So no, the above
> wouldn't take care of displayName.
> -peter
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
--
Robert W. Gorrell
Middleware Engineer, Identity and Access Management
University of NC at Greensboro
336-334-5954
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130516/098f9590/attachment.html
More information about the users
mailing list