Error Processing Profile Request
Cantor, Scott
cantor.2 at osu.edu
Thu Feb 25 16:32:23 EST 2016
> We are hoping to upgrade soon, but in the meantime we have this issue.
> Is there a workaround?
What you're doing is inappropriate, so the workaround is not to do it. There is no value in what you're trying to do, it's wrong. See below.
> <!-- Name Identifier related attributes -->
> <resolver:AttributeDefinition id="transientId" xsi:type="TransientId"
A transientID is a per-session random value that's just a placeholder. It is *never* useful to pass it with some other Format identifier because it would never "fit" any use case that would demand an alternative Format.
> <resolver:AttributeEncoder xsi:type="SAML1StringNameIdentifier"
> xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
> nameFormat="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified" />
> <resolver:AttributeEncoder xsi:type="SAML2StringNameID"
> xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
> nameFormat="urn:oasis:names:tc:SAML:1.1:nameid-
> format:unspecified" />
So, this set of encoders above is just wrong. I don't know why it happens to be failing in that way, but it's not a bug that anybody needs to work around, just don't do it. You have no reason to do it, and whatever reason you have is a mistake on your part, a misunderstanding.
-- Scott
More information about the users
mailing list