Help with IdP attribute configuration

[mariasol]

Hi All,

I'm not using LDAP, I getting the value from the request subject with a
script.

importPackage(Packages.edu.internet2.middleware.shibboleth.common.attribute.provider);
importPackage(Packages.example.jaas.authentication);

ImmutableID = new BasicAttribute("ImmutableID");

subject = requestContext.getUserSession().getSubject();

if (subject != null) {
     
ImmutableID.getValues().addAll(subject.getPrincipals(IdentityIdPrincipal("").getClass()));
}

I'll send a numeric id on the ImmutableID.

Here what I have on the attribute filter:
<afp:AttributeFilterPolicy id="releaseImmutableIDToAnyone">
	    <afp:PolicyRequirementRule xsi:type="basic:ANY"/>

        <afp:AttributeRule attributeID="ImmutableID">
            <afp:PermitValueRule xsi:type="basic:ANY"/>
        </afp:AttributeRule>
	</afp:AttributeFilterPolicy>

Then In my dummy SP, it is a shibboleth SP, in the attribute-map.xml I have:
<Attribute name="ImmutableID" id="ImmutableID"/>

As I said, when I use the SAML2String attribute encoder, I see the attribute
in the SP session, and in the ipd log I see:

 <saml2:Attribute Name=&quot;&lt;b>ImmutableID*"
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
         <saml2:AttributeValue
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:type="xs:string">5060872</saml2:AttributeValue>
      </saml2:Attribute>

And if I go to the http://sp-example.com/Shibboleth.sso/Session I see the
attribute

Miscellaneous
Session Expiration (barring inactivity): 479 minute(s)
Client Address: 127.0.0.1
SSO Protocol: urn:oasis:names:tc:SAML:2.0:protocol
Identity Provider: https://idp.com/idp/shibboleth
Authentication Time: 2014-07-18T18:30:25.449Z
Authentication Context Class:
urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport
Authentication Context Decl: (none)

Attributes
*ImmutableID: 1 value(s)*

The idea is to use the attribute encoder as the SP request, but I copy and
paste that encoder and doesn't work.

Thanks in advance
Sol




--
View this message in context: http://shibboleth.1660669.n2.nabble.com/Help-with-IdP-attribute-configuration-tp7603942p7603952.html
Sent from the Shibboleth - Users mailing list archive at Nabble.com.