Error When Using University's Idp

[Nate Klingenstein]

Would quadruple check. SP may be discarding if Scope isn't matched.  Can check transaction log or look in assertion.

Semt frim mt iPone

On Jun 26, 2015, at 13:51, "Antelmo Aguilar" <Antelmo.Aguilar.17 at nd.edu<mailto:Antelmo.Aguilar.17 at nd.edu>> wrote:

Hello Scott,

I have been working with one of the staff at the university that is in charge of the Idp and he said that he is releasing the eppn attribute to my Shibboleth SP.

If there is no reason to be relying on queries to get them, what other mechanism is there for him to release the eppn attribute to me?

Thanks!
Antelmo

On Fri, Jun 26, 2015 at 2:47 PM, Cantor, Scott <cantor.2 at osu.edu<mailto:cantor.2 at osu.edu>> wrote:
> I am trying to configure my Shibboleth SP to talk to the university's test Idp
> now, but I get the following error after I Iogin that prevents me from getting
> the attributes from the Idp:

No, the issue is that the IdP isn't giving you any attributes. There is no reason to be relying on queries to get them, and it wouldn't make any difference if the query succeeded, you'd get nothing back.

> I am currently trying to fix the issue, but thought it might be a good idea to
> ask for some help here in case you guys have come across this issue before.  I
> really appreciate any help.

There's nothing for you to fix, and the IdP should not be advertising query support. They have no policy to give you any attributes.

-- Scott

--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net<mailto:users-unsubscribe at shibboleth.net>

--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net<mailto:users-unsubscribe at shibboleth.net>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20150626/87a61fc0/attachment-0001.html>