No attributes released to SAML1 requests

[Andrew Chiarello]

To be more specific, when in my idp-audit log I see a request containing urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding, no attributes are included, whereas when the equivalent field says urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST , they are released correctly. 


Andrew J. Chiarello 
Network & Systems Engineer 
Bryn Mawr College 
610-526-7966 
achiarello at brynmawr.edu 
----- Original Message -----

From: "Andrew Chiarello" <achiarello at brynmawr.edu> 
To: "Shib Users" <users at shibboleth.net> 
Sent: Monday, July 20, 2015 10:03:38 AM 
Subject: Re: No attributes released to SAML1 requests 


Sorry, I should have included this in my original post - I'm using Shib 2.4.4 and Tomcat 6 - I'm planning to transition to 3, but can't do it yet. 



Andrew J. Chiarello 
Network & Systems Engineer 
Bryn Mawr College 
610-526-7966 
achiarello at brynmawr.edu 
----- Original Message -----

From: "Brandon Scott McKean - mckeanbs" <mckeanbs at jmu.edu> 
To: users at shibboleth.net 
Sent: Monday, July 20, 2015 9:48:49 AM 
Subject: Re: No attributes released to SAML1 requests 


Hi Andrew, 


I think I encountered what you're referring to recently myself. For SAML1 you need to configure back-channel support for that as well: 


https://urldefense.proofpoint.com/v1/url?u=https://wiki.shibboleth.net/confluence/display/IDP30/Jetty9%23Jetty9-SupportingSOAPEndpoints&k=Zn6W9g0QMlyJSNRckEnWug%3D%3D%0A&r=R4hgdRjDvFsRbXYPesLFdh0hT8jmPnezYYSN3xBJ%2Fjg%3D%0A&m=uW%2BmCLXMxu2FX84gXugvcqcrQSFBpRYB85c4fK3r%2F9w%3D%0A&s=cd45a6ab5f995dd17f8756f1c03683e60d9e831b68ba748daeea2b287a644a38 


Thanks, 



-- Brandon McKean IT / Systems Linux Administrator (540)568-4235 


On Mon, 2015-07-20 at 09:28 -0400, Andrew Chiarello wrote: 


Hi, 

I'm still fairly new to Shib, and I believe I have a configuration mistake, but I'm not quite sure where to look. What I'm seeing is that while attributes are being released normally when a SAML2 request comes in, no attributes are being sent for SAML1 requests. Can someone point me in the right direction to investigate that? 



Andrew J. Chiarello 
Network & Systems Engineer 
Bryn Mawr College 
610-526-7966 
achiarello at brynmawr.edu 
-- 
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net 


-- 
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net 

-- 
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20150720/2e448f00/attachment.html>