PersistentSAML2NameIDGenerator requires releasing attributeSourceIds
Marvin Addison
marvin.addison at gmail.com
Thu Apr 9 15:41:22 EDT 2015
I'm attempting to release persistent SAML2 NameIDs on 3.1.1, and found that
the source attribute has to be released to a relying party in order
for PersistentSAML2NameIDGenerator to find an attribute value on which to
perform the computation. Here are logs before and after releasing the
source attribute (uid) to my target RP:
------ Before -----
2015-04-09 12:17:14,528 - DEBUG
[net.shibboleth.idp.saml.nameid.impl.PersistentSAML2NameIDGenerator:189] -
Checking for source attribute uid
2015-04-09 12:17:14,529 - INFO
[net.shibboleth.idp.saml.nameid.impl.PersistentSAML2NameIDGenerator:218] -
Attribute sources [uid] did not produce a usable source identifier
------ After -----
2015-04-09 12:49:24,405 - DEBUG
[net.shibboleth.idp.saml.nameid.impl.PersistentSAML2NameIDGenerator:189] -
Checking for source attribute uid
2015-04-09 12:49:24,406 - DEBUG
[net.shibboleth.idp.saml.nameid.impl.PersistentSAML2NameIDGenerator:209] -
Generating NameID from String-valued attribute uid
This feels like a bug, but I wanted to mention it here before filing an
issue.
M
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20150409/07223e59/attachment.html
More information about the users
mailing list