help with first-time SP not releasing attributes/eppn

Peter Schober peter.schober at univie.ac.at
Thu May 16 11:27:54 EDT 2013


* Rob Gorrell <rwgorrel at uncg.edu> [2013-05-16 17:06]:
> I had included urn:mace:dir:attribute-def:displayName but not
> urn:oid:2.16.840.1.113730.3.1.241 in my attribute-map.xml. i'm now mapping
> and displaying displayName 

Great!

> but still having problems with eppn... so i must
> be related to the scoping you were talking about.

Yup.

> this is what I have in my IdP's metadata that i think you were referring
> too:
> <!-- This is a Shibboleth extension to express attribute scope rules. -->
>                         <shibmd:Scope regexp="false"
> xmlns:shibmd="urn:mace:shibboleth:metadata:1.0">
>                                 uncg.edu
>                         </shibmd:Scope>

If you posted the eppn value your IdP is sending previously I didn't
see it, which makes it hard to say the scope in metadata is correct.

Assuming the value is rwgorrel at uncg.edu (or whatever @uncg.edu) and it
still doesn't work, I'd make sure the shibmd:Scope element's value
does not contain any whitespace:

<shibmd:Scope regexp="false" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0">uncg.edu</shibmd:Scope>

I.e., make sure there are no line breaks or they are in any place
other than within the string value.
-peter


More information about the users mailing list