users Digest, Vol 33, Issue 42

[Cantor, Scott]

On 3/14/14, 5:16 PM, "Josh Christensen" <jchristensen at ftni.com> wrote:

>All logging is enabled and set to debug level.
> Then I ran through the login process.  Then, I searched the logs for
>"email".  There is only 1 hit.
>
>2014-03-14 16:05:13 DEBUG Shibboleth.PropertySet : added property
>REMOTE_USER (eppn persistent-id targeted-id email)

When the extraction code sees an Attribute it has no mapping rule for, it
has a log message containing this:

skipping unmapped SAML 2.0 Attribute with Name:


That's on INFO.

If the message does not appear, then the data is in fact mapped. But your
older logs would show that message from when the name was incorrect. In no
case could there be no messages in either, unless you're looking at the
wrong log (i.e. not shibd.log)

I can't tell you how to access the data, that's dependent on the
application tools. There should be a header created called HTTP_EMAIL and
there's no punctuation in the mapped header name so no chance of IIS
issues getting in the way.

If you want to know what it pulled out for sure, use
/Shibboleth.sso/Session. If it's there, and named properly, then the rest
is the application code.

-- Scott