Google Apps with IdPv3

[Marc Boorshtein]

I haven't tested it with google apps but yes have generated a response with
unspecified.  in attribute resolver I created an attribute :

<resolver:AttributeDefinition id="uidname" xsi:type="ad:Simple"
sourceAttributeID="uid">

         <resolver:Dependency ref="myLDAP" />

        <resolver:AttributeEncoder xmlns=
"urn:mace:shibboleth:2.0:attribute:encoder" xsi:type="SAML2StringNameID"
nameFormat="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified" />

    </resolver:AttributeDefinition>

then in attribute-filter.xml I added:


<afp:AttributeRule attributeID="uidname">

            <afp:PermitValueRule xsi:type="basic:ANY" />

                                </afp:AttributeRule>

Finally in saml-nameid.properties i set the default to unspecified:

idp.nameid.saml2.default = urn:oasis:names:tc:SAML:1.1:nameid
-format:unspecified

I think those were all the steps I took.

Thanks

Marc

On Thu, Mar 19, 2015 at 11:27 AM, Glenn Wearen <glenn.wearen at heanet.ie>
wrote:

> Has anybody managed to generate a response accepted by Google Apps with a
> new IdPv3 install, i.e. a response containing unspecified nameid format?
> Regards
> Glenn
>
> HEAnet Limited <http://www.heanet.ie>, Ireland's Education and Research
> Network -
> 1st Floor, 5 George's Dock, IFSC, Dublin 1
> Registered in Ireland, no 275301  tel: +353-1-6609040  fax: +353-1-6603666
>
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20150319/2cd76cb9/attachment.html