EPPN attribute

[Peter Schober]

* Josef Fortier <fortier at augsburg.edu> [2014-01-27 21:16]:
> I'm having trouble getting the far end SP to recognize the EPPN.
[...]
>     <saml:Attribute Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6"
>                 NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"
>                 >
>         <saml:AttributeValue xsi:type="xs:string">test_user at augsburg.edu</saml:AttributeValue>
>     </saml:Attribute>

That looks OK. If other attributes are coming though I'd guess that
it's limited to "scoped" attributes. Then eduPersonScopedAffiliation
would also not coming though. Does that match what you're seeing?

The reason for this to happen would be when the SAML metadata the SP
has for your IDP is missing a Scope metadata extension (or the value
of that element does not match what you're sending; unlikely in this
case).
I can't find your IDP in InCommon metadata (though Augsburg is listed
as a particpant) so can't check this for you. But I'd examine the SAML
metadata you gave to the SP.
-peter