Attribute not sending to new SP
Christopher Bongaarts
cab at umn.edu
Mon Sep 30 11:06:42 EDT 2013
On 9/30/2013 9:49 AM, David Perry wrote:
>
> Hi there
>
> I've setup a new (2.5.2) Service Provider under Server 2008 / IIS 7.5.
> The basics are tested, and I've setup the following attribute-filter
> definition (the same as it was for our old 2.4.2 SP, but with the
> requesterString updated):
>
>
> However, 2.5.2 doesn't want to interpret the ORGDN bit (EPPN is coming
> through fine, to HTTP_EPPN if I run a PHP script to spit out all the
> $_SERVER headers) even though it acknowledges there is an attribute --
> but it doesn't like that attribute, so here's a cranked up DEBUG
> including the (decoded) assertion:
>
> 2013-09-30 15:32:25 INFO Shibboleth.AttributeExtractor.XML [2]:
> skipping unmapped SAML 2.0 Attribute with Name:
> urn:oid:1.3.6.1.4.1.5923.1.1.1.3
>
You new SP needs to add urn:oid:1.3.6.1.4.1.5923.1.1.1.3to its
attribute-map.xml file.
--
%% Christopher A. Bongaarts %% cab at umn.edu %%
%% OIT - Identity Management %% http://umn.edu/~cab %%
%% University of Minnesota %% +1 (612) 625-1809 %%
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130930/86bc01b3/attachment.html
More information about the users
mailing list