How to generate Shibboleth with Empty Attribute in SAMLResponse

[Supakit Kiatrungrit]

Thank you John,


Box technical person is asking us to release attribute with empty value instead of release no attribute in order to redirect the user to custom URL that we provide to them.

Otherwise, Box.com will just display 'Invalid Login' message. 

Do you have an option to customize the message or redirect the user after login to Box.com when you don't release the attributes to Box.com?

Thanks,
Nat

________________________________________
From: users-bounces at shibboleth.net [users-bounces at shibboleth.net] on behalf of John C. Pfeifer [pfeifer at umd.edu]
Sent: Monday, February 10, 2014 11:52 AM
To: Shib Users
Subject: Re: How to generate Shibboleth with Empty Attribute in SAMLResponse

For users not authorized to use Box, we simply release no attributes.

On Feb 10, 2014, at 2:15 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:

> On 2/10/14, 2:03 PM, "Supakit Kiatrungrit" <supakitk at sfsu.edu> wrote:
>>
>> We are working to integrate Shibboleth with one of the vendor. There are
>> asking us if it possible to passing the attribute with empty value in the
>> SAMLResponse (example below) if the user not eligible to use the service.
>
> I doubt it. It's legal SAML, but I don't think the IdP will ever generate
> that.
>
> -- Scott
>
>
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net


//
John Pfeifer
Division of Information Technology
University of Maryland, College Park

--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net