EPPN attribute

[Josef Fortier]

Hi All:

I'm trying to speak to a vendors Shibboleth SP installed as an IIS
service. They successfully connect to inCommon. At our end we've set up
a SimpleSamlPHP IDP which works with a few other vendors.

I'm having trouble getting the far end SP to recognize the EPPN. Vendor
has set up en "echo" page to dump the environmental variables the app
sees. That page shows a lot of information is successfully picked up on
the far end, mostly LDAP attributes. But EPPN is not seen. I've followed
the SAML conversation (Firefox plugins) and it looks like it should
be getting there, in particular I see this fragment:

    <saml:Attribute Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6"
                NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"
                >
        <saml:AttributeValue xsi:type="xs:string">test_user at augsburg.edu</saml:AttributeValue>
    </saml:Attribute>

In my limited knowledge, this appears correct. The vendor is unable to
provide any support from their end (it "just works"). I'm hoping someone
here with more shibboleth and more SAML experience can point me in the
right direction as to why the vendors Shibboleth SP does not seem to
pick this up.

Thanks

-- 
__________________________________________________________________________
Josef Fortier
Systems Administrator
fortier at augsburg.edu
Phone: 612-330-1479
__________________________________________________________________________