Attribute mapping

[Robert Lowe]

If I receive an attribute statement like this:

<saml:AttributeStatement
xmlns:x500="urn:oasis:names:tc:SAML:2.0:profiles:attribute:X500" xmlns:xs="
http://www.w3.org/2001/XMLSchema" xmlns:xsi="
http://www.w3.org/2001/XMLSchema-instance">
  <saml:Attribute Name="Email"
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
    <saml:AttributeValue xsi:type="xs:string">jdoe at example.com
</saml:AttributeValue
  </saml:Attribute>
  <saml:Attribute Name="GivenName"
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
    <saml:AttributeValue xsi:type="xs:string">John</saml:AttributeValue>
  </saml:Attribute>
  <saml:Attribute Name="UserID"
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
    <saml:AttributeValue xsi:type="xs:string">jdoe</saml:AttributeValue>
  </saml:Attribute>
  <saml:Attribute Name="FamilyName"
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
    <saml:AttributeValue xsi:type="xs:string">Doe</saml:AttributeValue>
  </saml:Attribute>
</saml:AttributeStatement>

I should be able to extract the attributes using a mapping like this right?

<Attributes xmlns="urn:mace:shibboleth:2.0:attribute-map" xmlns:xsi="
http://www.w3.org/2001/XMLSchema-instance">
  <Attribute name="Email" id="Email"/>
  <Attribute name="GivenName" id="GivenName"/>
  <Attribute name="UserID" id="UserID"/>
  <Attribute name="FamilyName" id="FamilyName"/>
</Attributes>

When I start Shibboleth it appears to create the mappings:

2014-03-26 02:07:09 INFO Shibboleth.AttributeExtractor.XML : loaded XML
resource (D:/nd/shibboleth-sp/etc/shibboleth/attribute-map.xml)
2014-03-26 02:07:09 INFO Shibboleth.AttributeExtractor.XML : creating
mapping for Attribute Email
2014-03-26 02:07:09 INFO Shibboleth.AttributeExtractor.XML : creating
mapping for Attribute GivenName
2014-03-26 02:07:09 INFO Shibboleth.AttributeExtractor.XML : creating
mapping for Attribute UserID
2014-03-26 02:07:09 INFO Shibboleth.AttributeExtractor.XML : creating
mapping for Attribute FamilyName

But when processing the assertion it skips the attributes, claiming they
are unmapped:

2014-03-26 18:37:13 INFO Shibboleth.AttributeExtractor.XML [1]: skipping
unmapped SAML 2.0 Attribute with Name: Email,
Format:urn:oasis:names:tc:SAML:2.0:attrname-format:basic
2014-03-26 18:37:13 INFO Shibboleth.AttributeExtractor.XML [1]: skipping
unmapped SAML 2.0 Attribute with Name: GivenName,
Format:urn:oasis:names:tc:SAML:2.0:attrname-format:basic
2014-03-26 18:37:13 INFO Shibboleth.AttributeExtractor.XML [1]: skipping
unmapped SAML 2.0 Attribute with Name: UserID,
Format:urn:oasis:names:tc:SAML:2.0:attrname-format:basic
2014-03-26 18:37:13 INFO Shibboleth.AttributeExtractor.XML [1]: skipping
unmapped SAML 2.0 Attribute with Name: FamilyName,
Format:urn:oasis:names:tc:SAML:2.0:attrname-format:basic

What am I missing?

-- 
Best regards,

Robert Lowe
http://crepuscular.rmlowe.com/
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20140327/0311db80/attachment.html