Nagging error: 'unable to extract attributes, unknown XML object type: saml2p:Response'

[Cantor, Scott]

On 12/2/16, 10:57 AM, "users on behalf of Paul Wilt" <users-bounces at shibboleth.net on behalf of pewilt at gmail.com> wrote:

> I use the signature.log as an easy method to see the decrypted messages instead of having to rummage around
> in the shibd.log.

It's incredibly inefficient (that's an understatement), but it's your system. It's also just not necessary. You don't need anything but INFO to know exactly what got sent. If you have a mapping rule for some attribute, and it doesn't show up, then it's not there under that name in the assertion. No guessing needed. You are just not trusting it.

If it's there in the XML but you don't have a mapping rule, you'd get a message saying it ignored an Attribute. And if it were thrown out due to some filtering rule, there would at least be a mention of that.

>    No matter what shibd is no longer delivering that eduPersonScopedAffiliation value.  Is there some way for me
> to debug / figure out why that value has disappeared?

No, because from the information you're presenting, the reason is that the IdP isn't sending it.

-- Scott