Google apps setup trouble (again)

[Andrew Morgan]

On Tue, 7 Oct 2014, Dave Perry wrote:

> Well, my last obstacle seems to be: 16:39:19.181 - DEBUG 
> [edu.internet2.middleware.shibboleth.common.attribute.provider.ShibbolethSAML2AttributeAuthority:226] 
> - Attribute g_principal was not encoded because no SAML2AttributeEncoder 
> was attached to it
>
> Even though I have attached an encoder to it:
>                <resolver:AttributeDefinition id="g_principal" xsi:type="PrincipalName" xmlns="urn:mace:shibboleth:2.0:resolver:ad" sourceAttributeID="mail">
>
>                                <resolver:Dependency ref="myLDAP" />
>
>        <resolver:AttributeEncoder xsi:type="SAML2StringNameID" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
>            nameFormat="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified" />
>
>                </resolver:AttributeDefinition>
>
> As per this page:
> https://wiki.shibboleth.net/confluence/display/SHIB2/IdPAddAttributeExamples
>
> Not sure what I'm missing here.

Here is what I'm using.

attribute-resolver.xml:

     <!-- Google oregonstate.edu NameID attribute -->
     <resolver:AttributeDefinition xsi:type="ad:Simple" id="google-principal" sourceAttributeID="googlePrincipalName">
         <resolver:Dependency ref="ONIDLDAP" />
         <resolver:AttributeEncoder xsi:type="enc:SAML2StringNameID" nameFormat="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent"/>
     </resolver:AttributeDefinition>

attribute-filter.xml:

     <!-- Google oregonstate.edu principal -->
     <afp:AttributeFilterPolicy id="google-orst-principal">
         <afp:PolicyRequirementRule xsi:type="basic:AttributeRequesterString" value="google.com/a/oregonstate.edu" />
         <afp:AttributeRule attributeID="google-principal">
             <afp:PermitValueRule xsi:type="basic:ANY" />
         </afp:AttributeRule>
     </afp:AttributeFilterPolicy>


 	Andy