How to pass name id in a header?

Peter Schober peter.schober at univie.ac.at
Thu Feb 20 05:43:12 EST 2014


* jeger <albert.battle90 at gmail.com> [2014-02-20 11:13]:
> Are you implying that this is expected behavior?

Couldn't say, not knowing what "this" is.

> These log messages confuse me a lot.

Then turn off DEBUG logging. You turned it on (it's not the default),
it confuses you, so turn it off.

> Okay, now I understand what pushed attributes are. But IdP does not
> send any. All I need is login name in NameId which I get.
> 
> What I don't understand is what attributes my SP tries to
> resolve. Why SOAP message is sent?

Because (cf. shibboleth2.xml):

  <!-- Use a SAML query if no attributes are supplied during SSO. -->
  <AttributeResolver type="Query" subjectMatch="true"/>

Comment out that AttributeResolver to disable SOAP queries.
-peter


More information about the users mailing list