Help with IdP attribute configuration

mariasol sol.garcia at globant.com
Fri Jul 18 12:40:48 EDT 2014


Hi All,

I'm trying to configure the attribute-resolver.xml in order to send a
attribute to a SP.. the SP requested the following attribute conf:
<resolver:AttributeDefinition id="ImmutableID" xsi:type="Simple"
xmlns="urn:mace:shibboleth:2.0:resolver:ad"
          sourceAttributeID="objectGUID">
   <resolver:Dependency ref="myLDAP" />
    
   *<resolver:AttributeEncoder xsi:type="SAML2StringNameID"
xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
   nameFormat="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent" />*
  </resolver:AttributeDefinition> 

The issue I'm having is with the Attribute encoder, with this configuration
looks like the attribute is been filtered:
DEBUG
[edu.internet2.middleware.shibboleth.common.attribute.provider.ShibbolethSAML2AttributeAuthority:263]
- *Attribute ImmutableID was 
not encoded (filtered by query, or no SAML2AttributeEncoder attached).*

If I use other attribute  encoder it works and I see the attribute on the
dummy SP I have locally. For example if I use the following attribute
encoder:
		<resolver:AttributeEncoder xsi:type="SAML2String"
			xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
nameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"
			name="ImmutableID" />

Can you help me to understand what is the issue?

Thanks in advance
Sol




--
View this message in context: http://shibboleth.1660669.n2.nabble.com/Help-with-IdP-attribute-configuration-tp7603942.html
Sent from the Shibboleth - Users mailing list archive at Nabble.com.


More information about the users mailing list