Newbie question: Passing attributes from ADSF through Shibboleth
Peter Schober
peter.schober at univie.ac.at
Wed Oct 30 06:20:20 EDT 2013
* Griffin Cheng [CLIB] <cscheng at cpce-polyu.edu.hk> [2013-10-30 10:59]:
> Hello,
>
> I construct a small "attribute-map.xml" file to extract attributes from the institution's ADSF as follows:
>
> <Attributes xmlns="urn:mace:shibboleth:2.0:attribute-map" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
>
> <Attribute name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" id="eppn">
> <AttributeDecoder xsi:type="StringAttributeDecoder"/>
> </Attribute>
>
> <Attribute name="urn:oid:1.3.6.1.4.1.5923.1.1.1.9" id="ePSA">
> <AttributeDecoder xsi:type="ScopedAttributeDecoder" caseSensitive="false"/>
> </Attribute>
>
> <Attribute nameFormat="http://schemas.xmlsoap.org/claims" name="urn:oid:2.5.4.9" id="street"/>
>
> </Attributes>
> I can see the values [eppn] and [ePSA] fine. However, the value of
> the "street" attribute is missing. The ADSF admin claims that the
> test account should have the "street" value added.
Look at your shibd.log, possibly on DEBUG, it will tell you exactly
what it did what all attributes, and why.
If I had to guess I would say that the attribute name is wrong, it
will likely not be called "urn:oid:2.5.4.9" on the wire if you had to
adjust the nameFormat to be something else than URI.
> Do I have to add the "street" attribute also to the metadata
> provider? If so, what should it look like?
"Also"? You don't configure attributes in a MetadataProvider at all.
-peter
More information about the users
mailing list