How to pass name id in a header?
Peter Schober
peter.schober at univie.ac.at
Thu Feb 20 05:43:12 EST 2014
* jeger <albert.battle90 at gmail.com> [2014-02-20 11:13]:
> Are you implying that this is expected behavior?
Couldn't say, not knowing what "this" is.
> These log messages confuse me a lot.
Then turn off DEBUG logging. You turned it on (it's not the default),
it confuses you, so turn it off.
> Okay, now I understand what pushed attributes are. But IdP does not
> send any. All I need is login name in NameId which I get.
>
> What I don't understand is what attributes my SP tries to
> resolve. Why SOAP message is sent?
Because (cf. shibboleth2.xml):
<!-- Use a SAML query if no attributes are supplied during SSO. -->
<AttributeResolver type="Query" subjectMatch="true"/>
Comment out that AttributeResolver to disable SOAP queries.
-peter
More information about the users
mailing list