"Affiliation" attribute
Manoj Kancharla
manojk at silverchair.com
Wed Feb 24 14:59:52 EST 2016
We (SP) recently migrated 3 of our customers from OpenAthens SP to Shibboleth (using OA Federation) - Eduserv is in the middle of certification process. As a result, they haven't updated the catalogue causing some access issues to the users.
Eduserv provided us with 2 accounts which set up on our end. Login/Access for one of the accounts is working as expected. However, the other account is not. Debugging on my local indicates that "affiliation" and "targetedid" attributes are not visible in the Headers. Looking at the log, I see the following:
2016-02-24 14:34:54 WARN Shibboleth.AttributeFilter [1]: removed value at position (0) of attribute (targeted-id) from (http://idp.athoafdemo.eduserv.org.uk)
2016-02-24 14:34:54 WARN Shibboleth.AttributeFilter [1]: removed value at position (0) of attribute (affiliation) from (http://idp.athoafdemo.eduserv.org.uk)
2016-02-24 14:34:54 WARN Shibboleth.AttributeFilter [1]: removed value at position (0) of attribute (affiliation) from (http://idp.athoafdemo.eduserv.org.uk)
2016-02-24 14:34:54 WARN Shibboleth.AttributeFilter [1]: no values left, removing attribute (targeted-id) from (http://idp.athoafdemo.eduserv.org.uk)
2016-02-24 14:34:54 WARN Shibboleth.AttributeFilter [1]: no values left, removing attribute (affiliation) from (http://idp.athoafdemo.eduserv.org.uk)
2016-02-24 14:34:54 WARN Shibboleth.AttributeFilter [1]: no values left, removing attribute (affiliation) from (http://idp.athoafdemo.eduserv.org.uk)
Prior to these entries, I have a few of these lines "skipping unmapped SAML 2.0 Attribute with Name:" - 2016-02-24 14:34:54 INFO Shibboleth.AttributeExtractor.XML [1]: skipping unmapped SAML 2.0 Attribute with Name: organisationNum is one such entry.
The expected affilation is member at 67397901.idp.athoafdemo.eduserv.org.uk<mailto:member at 67397901.idp.athoafdemo.eduserv.org.uk>, where 67397901 is the Organisation Id.
Should I be making any changes in the attribute-map.xml?
Thanks
Manoj Kancharla
Senior Software Developer | Silverchair Information Systems
Email: manojk at silverchair.com<mailto:manojk at silverchair.com>
Skype: manoj.kancharla1
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160224/7c908eea/attachment.html>
More information about the users
mailing list