Not able to log on to Webex

[An H Nguyen]

Here is my current config for the two files that leads to the error:

==>> my attribute-resolver.xml has the following:

         <!-- Name Identifier as email for webex pilot -->

   <resolver:AttributeDefinition id="emailNameID" xsi:type="ad:Simple"
sourceAttributeID="primaryEmail">
    <resolver:Dependency ref="primaryEmail"/>
    <resolver:AttributeEncoder xsi:type="enc:SAML1StringNameIdentifier"
nameFormat="urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress"/>
    <resolver:AttributeEncoder xsi:type="enc:SAML2StringNameID"
nameFormat="urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress"/>
   </resolver:AttributeDefinition>


  <resolver:AttributeDefinition id="WebExFirstName" xsi:type="Simple"
xmlns="urn:mace:shibboleth:2.0:resolver:ad" sourceAttributeID="givenName">
     <resolver:Dependency ref="myLDAP"/>
     <resolver:AttributeEncoder xsi:type="SAML2String"
xmlns="urn:mace:shibboleth:2.0:attribute:encoder" name="FirstName"
friendlyName="FirstName"/>
  </resolver:AttributeDefinition>

  <resolver:AttributeDefinition id="WebExLastName" xsi:type="Simple"
xmlns="urn:mace:shibboleth:2.0:resolver:ad" sourceAttributeID="sn">
     <resolver:Dependency ref="myLDAP"/>
     <resolver:AttributeEncoder xsi:type="SAML2String"
xmlns="urn:mace:shibboleth:2.0:attribute:encoder" name="LastName"
friendlyName="LastName"/>
  </resolver:AttributeDefinition>

  <resolver:AttributeDefinition xsi:type="ad:Simple" id="WebExEmail"
xmlns="urn:mace:shibboleth:2.0:resolver:ad">
     <resolver:Dependency ref="primaryEmail"/>
     <resolver:AttributeEncoder xsi:type="enc:SAML2String"
xmlns="urn:mace:shibboleth:2.0:attribute:encoder" name="mail"
friendlyName="mail"/>
  </resolver:AttributeDefinition>

  <resolver:AttributeDefinition id="WebExUid" xsi:type="Simple"
xmlns="urn:mace:shibboleth:2.0:resolver:ad"
sourceAttributeID="sAMAccountName">
     <resolver:Dependency ref="myLDAP"/>
     <resolver:AttributeEncoder xsi:type="SAML2String"
xmlns="urn:mace:shibboleth:2.0:attribute:encoder" name="uid"
friendlyName="uid"/>
  </resolver:AttributeDefinition>

    <resolver:AttributeDefinition id="SAML_SUBJECT" xsi:type="Simple"
xmlns="urn:mace:shibboleth:2.0:resolver:ad" sourceAttributeID="mail">
     <resolver:Dependency ref="myLDAP"/>
     <resolver:AttributeEncoder xsi:type="SAML2String"
xmlns="urn:mace:shibboleth:2.0:attribute:encoder" name="SAML_SUBJECT"
friendlyName="SAML_SUBJECT"/>
  </resolver:AttributeDefinition>




and
==>> my attribute-filter.xml contains:

        <!-- Release Policy for sjsu webex pilot SP -->

                <afp:AttributeFilterPolicy id="http://www.webex.com">
                <afp:PolicyRequirementRule
xsi:type="basic:AttributeRequesterString" value="http://www.webex.com" />

                <afp:AttributeRule attributeID="emailNameID">
                                <afp:PermitValueRule xsi:type="basic:ANY" />
                </afp:AttributeRule>

                <afp:AttributeRule attributeID="WebExFirstName">
                                <afp:PermitValueRule xsi:type="basic:ANY" />
                </afp:AttributeRule>
                <afp:AttributeRule attributeID="WebExLastName">
                                <afp:PermitValueRule xsi:type="basic:ANY" />
                </afp:AttributeRule>
                <afp:AttributeRule attributeID="WebExEmail">
                                <afp:PermitValueRule xsi:type="basic:ANY" />
                </afp:AttributeRule>
                <afp:AttributeRule attributeID="WebExUid">
                                <afp:PermitValueRule xsi:type="basic:ANY" />
                </afp:AttributeRule>

                 <afp:AttributeRule attributeID="SAML_SUBJECT">
                                <afp:PermitValueRule xsi:type="basic:ANY" />
                </afp:AttributeRule>


                </afp:AttributeFilterPolicy>





On Tue, Jan 19, 2016 at 12:00 PM, IAM David Bantz <dabantz at alaska.edu>
wrote:

> attribute-resolver.xml to encode an appropriate attribute
> attribute-filter.xml to release that attribute to the SP
>
>
> On Tue, Jan 19, 2016 at 10:56 AM, An H Nguyen <an.h.nguyen at sjsu.edu>
> wrote:
>
>> What files do I need to look to correct the name identifier in the format
>> required by the SP?
>>
>> Thanks
>>
>> On Tue, Jan 19, 2016 at 11:53 AM, IAM David Bantz <dabantz at alaska.edu>
>> wrote:
>>
>>> It looks like your IdP could not include a name identifier in the format
>>> required by the SP.
>>>
>>> On Tue, Jan 19, 2016 at 10:43 AM, An H Nguyen <an.h.nguyen at sjsu.edu>
>>> wrote:
>>>
>>>> 2016-01-19 11:25:25,405 - DEBUG
>>>> [net.shibboleth.idp.saml.profile.logic.DefaultNameIdentifierFormatStrategy:100]
>>>> - Configuration specifies the following formats:
>>>> [urn:oasis:names:tc:SAML:2.0:nameid-format:emailAddress]
>>>> 2016-01-19 11:25:25,405 - DEBUG
>>>> [net.shibboleth.idp.saml.profile.logic.DefaultNameIdentifierFormatStrategy:121]
>>>> - Filtered non-metadata-supported formats from configured formats, leaving:
>>>> [urn:oasis:names:tc:SAML:2.0:nameid-format:emailAddress]
>>>> 2016-01-19 11:25:25,405 - DEBUG
>>>> [net.shibboleth.idp.saml.nameid.impl.LegacyNameIdentifierGenerator:151] -
>>>> Unable to obtain name identifier from legacy attribute encoders
>>>>
>>>
>>>
>>>
>>> --
>>> To unsubscribe from this list send an email to
>>> users-unsubscribe at shibboleth.net
>>>
>>
>>
>>
>> --
>> Thanks,
>> - - - - - - - - - - - -
>> An H. Nguyen
>> SJSU Computing Systems Analyst
>>
>> --
>> To unsubscribe from this list send an email to
>> users-unsubscribe at shibboleth.net
>>
>
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>



-- 
Thanks,
- - - - - - - - - - - -
An H. Nguyen
SJSU Computing Systems Analyst
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160119/c2e56a98/attachment-0001.html>