Help with IdP attribute configuration
mariasol
sol.garcia at globant.com
Fri Jul 18 12:40:48 EDT 2014
Hi All,
I'm trying to configure the attribute-resolver.xml in order to send a
attribute to a SP.. the SP requested the following attribute conf:
<resolver:AttributeDefinition id="ImmutableID" xsi:type="Simple"
xmlns="urn:mace:shibboleth:2.0:resolver:ad"
sourceAttributeID="objectGUID">
<resolver:Dependency ref="myLDAP" />
*<resolver:AttributeEncoder xsi:type="SAML2StringNameID"
xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
nameFormat="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent" />*
</resolver:AttributeDefinition>
The issue I'm having is with the Attribute encoder, with this configuration
looks like the attribute is been filtered:
DEBUG
[edu.internet2.middleware.shibboleth.common.attribute.provider.ShibbolethSAML2AttributeAuthority:263]
- *Attribute ImmutableID was
not encoded (filtered by query, or no SAML2AttributeEncoder attached).*
If I use other attribute encoder it works and I see the attribute on the
dummy SP I have locally. For example if I use the following attribute
encoder:
<resolver:AttributeEncoder xsi:type="SAML2String"
xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
nameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"
name="ImmutableID" />
Can you help me to understand what is the issue?
Thanks in advance
Sol
--
View this message in context: http://shibboleth.1660669.n2.nabble.com/Help-with-IdP-attribute-configuration-tp7603942.html
Sent from the Shibboleth - Users mailing list archive at Nabble.com.
More information about the users
mailing list