Scoping an attribute

[Dave Vernon]

Hello again Internet,

Thanks largely to the help of this group, I now have my Shib SP talking to my Shib IdP, which I am using to protect my Blackboard learn server.

I'm down to one final issue that I've been working through.  My blackboard server has the users created with their username from Active Directory (i.e. the sam account name in windows), so, for example my logon is dvernon

I have the following setup in my attribute map on the SP


   <Attribute name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" id="eppn" nameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
        <AttributeDecoder xsi:type="ScopedAttributeDecoder"/>
</Attribute>

I am able to login and authenticate to shibboleth, but the authentication fails at blackboard.  I've found that the username is arriving in the UPN format (i.e. dvernon at ads.loyalistcollege.ca<mailto:dvernon at ads.loyalistcollege.ca>).   (The good news is that everything works if I change the Blackboard userid field to match the upn_

I thought that the ScopedAttributeDecoder was supposed to drop the domain portion.. at least that was my understanding from the documentation.  I did double check the IdP to make sure that 'ads.loyalistcollege.ca' was in the md for the scope there.

The log on the SP seems to think it's being scoped

2014-10-06 11:15:53 DEBUG Shibboleth.AttributeDecoder.Scoped [1]: decoding ScopedAttribute (eppn) from SAML 2 Attribute (urn:oid:1.3.6.1.4.1.5923.1.1.1.6) with 1 value(s)

Any ideas what I'm missing to allow ONLY the username portion to be delivered?

Thanks!

Dave Vernon
Technology Infrastructure Specialist
dvernon at loyalistc.on.ca<mailto:dvernon at loyalistc.on.ca>
loyalistcollege.com<http://loyalistcollege.com/>

[Loyalist College]<http://www.loyalistcollege.com/>[Facebook]<https://www.facebook.com/loyalistcollege>[Twitter]<https://twitter.com/loyalistcollege>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20141006/e5a5f19a/attachment.html 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 4005 bytes
Desc: image001.png
Url : http://shibboleth.net/pipermail/users/attachments/20141006/e5a5f19a/attachment.png 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image002.png
Type: image/png
Size: 1476 bytes
Desc: image002.png
Url : http://shibboleth.net/pipermail/users/attachments/20141006/e5a5f19a/attachment-0001.png 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image003.png
Type: image/png
Size: 1536 bytes
Desc: image003.png
Url : http://shibboleth.net/pipermail/users/attachments/20141006/e5a5f19a/attachment-0002.png