ArcGIS on Shib 3

[Cantor, Scott]

> Added this to saml-nameid.properties:
> 
> idp.nameid.saml2.default = urn:oasis:names:tc:SAML:1.1:nameid-
> format:emailAddress

That's a global default, which I doubt very much is what you want.

> And attribute-filter.xml:
> 
> 
> <afp:AttributeFilterPolicy>
>               <afp:PolicyRequirementRule
> xsi:type="basic:AttributeRequesterString" value="jmu.maps.arcgis.com" />

That's not a valid entityID, but of course I have no idea if that's right or not.

> Yep this is what I get in logs when I try to login:

That means there is no released value for the mail attribute to the SP in question.

> Perhaps I'm missing something? I didn't add to metadata yet just because
> this box is dedicated to testing them, so I figured I'd set it in saml-
> nameid.properties

Well, you could, but the worst way to test something is by doing things that are not in fact part of the process you're testing.

-- Scott