Exception when extracting attributes

[delosrec]

I have a Shibboleth SP trying to communicate with another organization's IdP.
The user can successfully authenticate but I'm having issues extracting any
attributes. I get the following error in my shibd.log file:

ERROR Shibboleth.SSO.SAML2 [144]: caught exception extracting attributes:
Direct access to content is not permitted.

The IdP's saml response file contains the following section:

<saml:AttributeStatement xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">
    <saml:Attribute Name="ORGNAME_FIRST_NAME">
        <xs:string
xmlns:xs="http://www.w3.org/2001/XMLSchema">John</xs:string>
    </saml:Attribute>
    <saml:Attribute Name="ORGNAME_ACCOUNT_NAME">
        <xs:string
xmlns:xs="http://www.w3.org/2001/XMLSchema">SMITHJOHN</xs:string>
    </saml:Attribute>
</saml:AttributeStatement>

And I have the following defined in my attribute-map.xml file:

<Attribute name="ORGNAME_FIRST_NAME" id="shibusername" />
<Attribute name="ORGNAME_ACCOUNT_NAME" id="shibfirstname" />

Can someone let me know what's going wrong?

Thanks!
Cathy 



--
View this message in context: http://shibboleth.1660669.n2.nabble.com/Exception-when-extracting-attributes-tp7590838.html
Sent from the Shibboleth - Users mailing list archive at Nabble.com.