Error When Using University's Idp

[Antelmo Aguilar]

Hi all,

@David - Scott mentioned that there is a query only because the SP does not
seem to get the attributes during the assertion (which is the recommended
way of getting them).

@Scott - Can you tell me where I can modify the logger on the SP side so
that I can see the assertion after it has been decrypted?  I tried googling
first and the most relevant thing I could find was a post from another user
where you were also part of the conversation.  Unfortunately, it seems the
user was more interested in seeing the values in the Session page so you
did not provide details on how to do change the logger to provide that
information.

I have also requested the logs of the Idp from the staff to see if I can
verify anything on their end.

Thanks,
Antelmo


On Fri, Jun 26, 2015 at 9:30 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:

> > The staff member that manages the Idp tells me that the attributes are
> > released during the assertion.
>
> If that were true, there would be no query.
>
> You can dump the assertion after its been decrypted in the logs with the
> appropriate adjustments to the logging and make a definitive determination
> as to what's in it.
>
> The IdP also has logs that definitively document what attributes it
> included.
>
> If there's an attribute query attempted, I'm telling you that the IdP did
> not release any attributes to you. You can believe me, or not, but I wrote
> the code.
>
> -- Scott
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20150627/55c68ee0/attachment.html>