why is my SP using SOAP?!
Liam Hoekenga
liamr at umich.edu
Thu Jun 19 14:01:04 EDT 2014
>>>> Why is it using soap for A and B?
>>>
>>> Is the SP getting all the attributes it wants from both your IdPs ??
>>>
>>> If you have 8443 setup as an AA then SP will query back if it doesn’t get the attributes it wants.
>>>
>>> (I think this is what I recall seeing)
>>
>>You’d be able to see that in the logs on either side
It looks like we're not sending attrs:
13:39:45.999 - DEBUG
[edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:139]
- Filter policy InCommon is active for principal liamr
13:39:46.164 - INFO [Shibboleth-Audit:1028] -
20140619T173946Z|urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect|_b776ea92beb3295bb216a89bec80ae5b|https://shib-sp.example.edu/shibboleth|urn:mace:shibboleth:2.0:profiles:saml2:sso|https://idp-dev.example.edu/idp/shibboleth|urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST|_1737b1f3117de806fe9c5cbdb1cac899|liamr|urn:oasis:names:tc:SAML:2.0:ac:classes:unspecified||_d9f2ac1b908b7916a965c12bbe844346|_072e2f102229f9c387991692446df197,|
The attribute-filter stuff suggests that we should be releasing attributes.
I'll try disabling this new build of uApprove.
Liam
More information about the users
mailing list