Help needed to create XML message in SAML response attribute

Cantor, Scott cantor.2 at osu.edu
Fri May 17 17:54:42 EDT 2013


On 5/17/13 5:19 PM, "kotesh201" <koteshwarv at gmail.com> wrote:
>
>Hi, I am using Shibboleth Idp to act as Identity provider. I have two
>specific questions. Question 1) I am using SAML2 authentication engine. I
>would like to log the SAML Request coming from SP AND SAML Response sent
>from IdP.

Look at logging.xml and it tells you how to do that by uncommenting what's
already there.

>Question 2 ) I am able to access the application JAVA objects using
>script attributes. But I need to send the XML content as additional
>attributes in SAML authentication response ( in assertion ).

That's a fairly bad idea but that aside, I think you have to write a
custom attribute definition to do that.

> For this I am trying to hard code as below.

I don't think that will work.

>I am getting below status message in SAML response
>Required NameID format not supported

Nothing to do with it, that's because of a probably misguided SP
specifying a NameIDFormat in its request. Or you're going to have to add
support for whatever NameID format it wants to your confguration.

-- Scott




More information about the users mailing list