why is my SP using SOAP?!
Liam Hoekenga
liamr at umich.edu
Thu Jun 19 14:05:40 EDT 2014
Nope, not uApprove.
Liam
On Thu, Jun 19, 2014 at 2:01 PM, Liam Hoekenga <liamr at umich.edu> wrote:
>>>>> Why is it using soap for A and B?
>>>>
>>>> Is the SP getting all the attributes it wants from both your IdPs ??
>>>>
>>>> If you have 8443 setup as an AA then SP will query back if it doesn’t get the attributes it wants.
>>>>
>>>> (I think this is what I recall seeing)
>>>
>>>You’d be able to see that in the logs on either side
>
> It looks like we're not sending attrs:
>
> 13:39:45.999 - DEBUG
> [edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:139]
> - Filter policy InCommon is active for principal liamr
> 13:39:46.164 - INFO [Shibboleth-Audit:1028] -
> 20140619T173946Z|urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect|_b776ea92beb3295bb216a89bec80ae5b|https://shib-sp.example.edu/shibboleth|urn:mace:shibboleth:2.0:profiles:saml2:sso|https://idp-dev.example.edu/idp/shibboleth|urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST|_1737b1f3117de806fe9c5cbdb1cac899|liamr|urn:oasis:names:tc:SAML:2.0:ac:classes:unspecified||_d9f2ac1b908b7916a965c12bbe844346|_072e2f102229f9c387991692446df197,|
>
> The attribute-filter stuff suggests that we should be releasing attributes.
>
> I'll try disabling this new build of uApprove.
>
> Liam
More information about the users
mailing list