IdP: Returning emailAddress as NameId in SAMLResponse Assertion

[vyal2k]

Hi,
 I have set the log level to DEBUG. I checked my LDAP directory and can see user has value for "mail" attribute.
I have attached the idp-process.log, attribute-resolver.xml and attribute-filter.xml.

Let me know if i am missing something here.

Thanks,
Vasu


________________________________
 From: Kevin P. Foote <kpfoote at iup.edu>
To: Shib Users <users at shibboleth.net> 
Sent: Thursday, 21 November 2013 9:49 PM
Subject: Re: IdP: Returning emailAddress as NameId in SAMLResponse Assertion
 




On Thu, 21 Nov 2013, vyal2k wrote:

> Thanks. 
> I commented out the "AttributeFilterPolicy" for "transientId" AttributeRule and now there is no response from IdP and i see the following in idp-process.log:
>
> 21:34:27.889 - WARN [edu.internet2.middleware.shibboleth.idp.profile.AbstractSAMLProfileHandler:491] - No attribute of principal 'user1' can be encoded in to a NameIdentifier of required format 'urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress' for relying party 'https://inw00003973:8443'

So now you are back to getting your attribute-resolver fixed so one of
your attributes is properly encoded to the format you are trying to
deliver.

I'm guessing that the attribute you are trying to encode to the specific
format is not being populated for the user properly and therefor can not
be encoded correctly... Again just guessing.

You should also turn up logging to the level of "Debug" when testing
this stuff so many of these errors will bubble up so you can see them.



------
thanks
  kevin.foote

--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20131121/f247968d/attachment-0001.html 
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: ipd-process.log
Url: http://shibboleth.net/pipermail/users/attachments/20131121/f247968d/attachment-0001.pl 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: attribute-filter.xml
Type: text/xml
Size: 1425 bytes
Desc: not available
Url : http://shibboleth.net/pipermail/users/attachments/20131121/f247968d/attachment-0002.xml 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: attribute-resolver.xml
Type: text/xml
Size: 11565 bytes
Desc: not available
Url : http://shibboleth.net/pipermail/users/attachments/20131121/f247968d/attachment-0003.xml