help with first-time SP not releasing attributes/eppn

Rob Gorrell rwgorrel at uncg.edu
Thu May 16 13:09:09 EDT 2013


Peter, thank you very much for your help! Yes, the eppn value being passed
was rwgorrel at uncg.edu...  you were right, it was the white space in the
idp's metadata causing the problem. I know have a fully flowing eppn!
again, thank you very much.

-Rob


On Thu, May 16, 2013 at 11:27 AM, Peter Schober
<peter.schober at univie.ac.at>wrote:

> * Rob Gorrell <rwgorrel at uncg.edu> [2013-05-16 17:06]:
> > I had included urn:mace:dir:attribute-def:displayName but not
> > urn:oid:2.16.840.1.113730.3.1.241 in my attribute-map.xml. i'm now
> mapping
> > and displaying displayName
>
> Great!
>
> > but still having problems with eppn... so i must
> > be related to the scoping you were talking about.
>
> Yup.
>
> > this is what I have in my IdP's metadata that i think you were referring
> > too:
> > <!-- This is a Shibboleth extension to express attribute scope rules. -->
> >                         <shibmd:Scope regexp="false"
> > xmlns:shibmd="urn:mace:shibboleth:metadata:1.0">
> >                                 uncg.edu
> >                         </shibmd:Scope>
>
> If you posted the eppn value your IdP is sending previously I didn't
> see it, which makes it hard to say the scope in metadata is correct.
>
> Assuming the value is rwgorrel at uncg.edu (or whatever @uncg.edu) and it
> still doesn't work, I'd make sure the shibmd:Scope element's value
> does not contain any whitespace:
>
> <shibmd:Scope regexp="false"
> xmlns:shibmd="urn:mace:shibboleth:metadata:1.0">uncg.edu</shibmd:Scope>
>
> I.e., make sure there are no line breaks or they are in any place
> other than within the string value.
> -peter
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>



-- 
Robert W. Gorrell
Middleware Engineer, Identity and Access Management
University of NC at Greensboro
336-334-5954
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130516/86736c9f/attachment.html 


More information about the users mailing list