ERROR in LOGS IdPv3

John Morrison john.morrison at uadm.uu.se
Thu Aug 25 07:50:45 EDT 2016


On Wed, 2016-08-24 at 18:01 +0000, Cantor, Scott wrote:
> On 8/24/16, 11:59 AM, "users on behalf of John Morrison" <users-bounces at shibboleth.net on behalf of john.morrison at uadm.uu.se> wrote:
> 
> >    I am using the new method of nameid generation and not using the
> >    resolver data connector as previously in version2.
> 
> Ok, but:
> 
> >    attribute-resolver.xml:
> 
> All of that is the old stuff, being used to embed the NameID in an AttributeValue. There's no "new" way to do that, in fact, we just deprecated the idea itself a long time back, and there is no "newer" way to generate it in V3. It's not going away, but regardless, that is NOT the new "nameid generation" stuff.
> 
> And it *will* run for CAS. So...that's why it's happening.
> 
> -- Scott
> 
> 

Is there anyway I can block for all CAS auths to not release
eduPersonTargetedID.

You can't do a wild card filter, I've notice in the filter, to deny an
attribute.


Cheers,


//John



More information about the users mailing list