Error while creating bean with name "searchUsername" for AttributePostLoginC14NConfiguration

[Roderick Grau]

Scott,

Thank you for setting me on the right path.

I am trying to get the saml nameid in plain text.  From the archives http://shibboleth.1660669.n2.nabble.com/Using-IDP-V3-for-SSO-with-AWS-td7620775.html I found the encryptNameIDs.

This is what I have in my relying-party.xml:

<!-- Force nameID for test-idm.suny.edu  01/11/2016 -->
     <bean parent="RelyingPartyByName" c:relyingPartyIds="#{{'https://test-idm.suny.edu/fed/sp/metadata', 'https://idm.suny.edu/fed/sp/metadata'}}">
       <property name="profileConfigurations">
         <list>
           <bean parent="SAML2.SSO"
             p:nameIDFormatPrecedence="#{{
               'urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress'}}"
             p:signAssertions="true"
             p:encryptAssertions="false"
             p:encryptNameIDs="never" />
         </list>
       </property>
     </bean>

Using a Firefox plugin, saml tracer.  This is what I am seeing being sent to the SP.

<saml2:NameID Format="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent"
                         NameQualifier="https://weblogindevel.itsli.albany.edu/shibboleth/idp2"
                         SPNameQualifier="https://test-idm.suny.edu/fed/sp/metadata"
                         xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion"
> 52pxqryoHfsQ0ovV0H2IEAGW44I=</saml2:NameID>

I found this in the idp-process.log:

2016-01-13 11:40:30,347 - DEBUG [net.shibboleth.idp.saml.nameid.impl.PersistentSAML2NameIDGenerator:205] - Checking for source attribute uid
2016-01-13 11:40:30,348 - DEBUG [net.shibboleth.idp.saml.nameid.impl.PersistentSAML2NameIDGenerator:225] - Generating persistent NameID from String-valued attribute uid

Unless I am missing something, It looks like the relying party override is not working.

Thank you for your help.

-Rod

> On Jan 12, 2016, at 4:21 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:
> 
>> I did the configuration in small-nameid.xml from the
>> CustomNameIDGenerationConfiguration wiki page for the SAML 2.0 E-mail
>> format.
> 
> Ok.
> 
>> I also did the config in saml-nameid.properties:
> 
> There is no config needed there, the page is very explicit about that.
> 
>> Hopefully I just have something oin the wrong place.  I don’t really want to
>> just duplicate the v2 config, because it will have to be fixed at some point.
> 
> I don't know what your problem is at the moment, so I'm not sure what help you're looking for now.
> 
> -- Scott
> 
> -- 
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net

--
Roderick Grau
Enterprise Infrastructure Services
University at Albany
1400 Washington Avenue Ext.
Albany, New York 12222