help with first-time SP not releasing attributes/eppn
Peter Schober
peter.schober at univie.ac.at
Thu May 16 11:27:54 EDT 2013
* Rob Gorrell <rwgorrel at uncg.edu> [2013-05-16 17:06]:
> I had included urn:mace:dir:attribute-def:displayName but not
> urn:oid:2.16.840.1.113730.3.1.241 in my attribute-map.xml. i'm now mapping
> and displaying displayName
Great!
> but still having problems with eppn... so i must
> be related to the scoping you were talking about.
Yup.
> this is what I have in my IdP's metadata that i think you were referring
> too:
> <!-- This is a Shibboleth extension to express attribute scope rules. -->
> <shibmd:Scope regexp="false"
> xmlns:shibmd="urn:mace:shibboleth:metadata:1.0">
> uncg.edu
> </shibmd:Scope>
If you posted the eppn value your IdP is sending previously I didn't
see it, which makes it hard to say the scope in metadata is correct.
Assuming the value is rwgorrel at uncg.edu (or whatever @uncg.edu) and it
still doesn't work, I'd make sure the shibmd:Scope element's value
does not contain any whitespace:
<shibmd:Scope regexp="false" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0">uncg.edu</shibmd:Scope>
I.e., make sure there are no line breaks or they are in any place
other than within the string value.
-peter
More information about the users
mailing list