Shibboleth Service Provider - Need Help with Attribute Map

[Pete Williams]

Hi
So, with Scott's help, I've got Shibboleth configured correctly - up to a point. I'm using IIS.
I have a secure URL, and when I access it, Shibboleth redirects me to me IDP which is my case is OKTA. I do the login with OKTA and then I come back to me website at the right point and I can see there is a SAML response (encrypted).
What I have not been able top work out today is how to configure attribute-map.xml
This is what OKTA has in terms of attributes which you add to the response.
AttributeName|Value|Namespace
and their example is:
role|ENG|urn:oasis:names:tc:SAML:2.0:attrname-format:uri
So I have entered the following line into attribute-map.
<Attribute name="role" id="role" nameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" />
So I'm expecting that
Response.Write(Request("HTTP_ROLE"));
on the page my IDP returns me to will give me 'ENG' but it gives me nothing.
There is clearly something wrong I'm doing here, but I'd appreciate some pointers.
Cheers,
 		 	   		  
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20141026/6cfb6bb3/attachment.html