How to see Shibboleth headers?
Peter Schober
peter.schober at univie.ac.at
Tue Apr 14 14:25:30 EDT 2015
* Andrej Gregorka <Andrej.Gregorka at ixtlan-team.si> [2015-04-14 20:00]:
> Attributes
>
>
>
This is were attributes would be, if those were recieved and mapped.
> I have defined mail in attribute-map.xml:
> <Attribute name="urn:mace:dir:attribute-def:mail" id="mail"/>
Unless the IDP is sending this over SAML1 using the MACE-Dir
convention this is irrelevant, or the IDP is sending invalid attribute
names.
In the simplest case (since you also seem to be using the Shibbolth
IDP) skim down further in your attribute-map.xml and uncomment the
urn:oid-based entry for id="mail", too. That will cover SAML2 usage
(according to the MACE-Dir Attribute Profiles which are also what the
Shib IDP uses in commented example configuration files).
Also note that environment variables are preferrable over HTTP Request
Headers, which for a Java application means tunnelling requests to the
Java servlet container via AJP. The Shibboleth documentation has all
the details.
-peter
More information about the users
mailing list