Weird issues validating prescoped attribute values in Shibboleth SP 2.5.5

Cantor, Scott cantor.2 at osu.edu
Thu Nov 5 19:22:53 EST 2015


On 11/5/15, 4:24 PM, "users on behalf of Nick Roy" <users-bounces at shibboleth.net on behalf of nroy at internet2.edu> wrote:



>  When I set this back to ScopedAttributeDecoder, the values get rejected as being unscoped:
>2015-11-05 13:09:42 WARN Shibboleth.AttributeDecoder.Scoped [1]: ignoring unscoped AttributeValue
>2015-11-05 13:09:42 WARN Shibboleth.AttributeDecoder.Scoped [1]: ignoring unscoped AttributeValue

That's pretty much self-explanatory, your issue is with the IdP.

>I'm wondering if the IdP is ripping the scope off of the eduPersonScopedAffiliation.  If it's doing this, why isn't it doing the same with ePPN?

No idea, but it's not configured correctly.

-- Scott



More information about the users mailing list