Error When Using University's Idp

[Nate Klingenstein]

Top Posting here

Semt frim mt iPone

On Jun 26, 2015, at 14:49, "Antelmo Aguilar" <Antelmo.Aguilar.17 at nd.edu<mailto:Antelmo.Aguilar.17 at nd.edu>> wrote:

Hi Scott and Nate,

I believe the issue is on Idp side.  I compared the logs using Testshib Idp and the University's Idp and it seems that the University does not include the attributes in the assertion.

Probably different for different SP's.  Likely different metadata too.

I am currently waiting on the staff that manages the Idp to see what he says, but I think with both of your suggestions, we can figure out a solution.

Will post back to let you guys know how it went.

Thank you.

Thanks!
Antelmo

On Fri, Jun 26, 2015 at 2:58 PM, Cantor, Scott <cantor.2 at osu.edu<mailto:cantor.2 at osu.edu>> wrote:
> I have been working with one of the staff at the university that is in charge of
> the Idp and he said that he is releasing the eppn attribute to my Shibboleth
> SP.

Then either your SP is using the wrong entityID, there's a Scope issue with the IdP's metadata vs. what they're putting in the EPPN, as Nate mentioned, or he's incorrect.

> If there is no reason to be relying on queries to get them, what other
> mechanism is there for him to release the eppn attribute to me?

The normal way, including them in the original assertion.

-- Scott


--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net<mailto:users-unsubscribe at shibboleth.net>

--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net<mailto:users-unsubscribe at shibboleth.net>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20150626/103fdb11/attachment.html>