Problems using FEIDE as IdP with shibboleth

[Lars Slettjord]

Hi

I am out of my depth, and would like some help if possible.

I am using the documentation at http://guides.dataverse.org/en/latest/installation/shibboleth.html trying to authenticate users with shibboleth using FEIDE (https://www.feide.no/) as IdP, but I am stuck with the error message

  Problem with Identity Provider The SAML assertion for "eppn" was null. Please contact support.

The FEIDE authentication is ok, and I can see shibboleth a new session being created in /var/log/shibboleth/shibd.log. But I'm guessing the attributes I get from FEIDE are not reaching dataverse shomehow.

I get the following attributes from FEIDE:

* eduPersonPrincipalName
* givenName
* mail
* sn

They have a list of available attributes on https://www.feide.no/attributelist


I have modified shibboleth2.xml on my test-server like this: (only the modifications shown)

 <ApplicationDefaults entityID="https://cripslock.uit.no/sp"
  REMOTE_USER="eppn"
  attributePrefix="AJP_">

 <!-- FEIDE Idp metadata -->
 <MetadataProvider type="XML"
  uri="https://idp-test.feide.no/simplesaml/saml2/idp/metadata.php"
  backingFilePath="local-idp-metadata.xml"
  legacyOrgNames="true"
  reloadInterval="7200"/>

And attribute-map.xml as suggested by FEIDE like this:

 <Attribute name="eduPersonPrincipalName" id="eppn"
           nameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
    <AttributeDecoder xsi:type="ScopedAttributeDecoder"/>
 </Attribute>

 <Attribute name="givenName" id="givenName"
           nameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"/>
    <AttributeDecoder xsi:type="ScopedAttributeDecoder"/>
 </Attribute>

 <Attribute name="sn" id="sn"
           nameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"/>
    <AttributeDecoder xsi:type="ScopedAttributeDecoder"/>
 </Attribute>

 <Attribute name="mail" id="mail"
           nameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"/>
    <AttributeDecoder xsi:type="ScopedAttributeDecoder"/>
 </Attribute>

 <Attribute name="email" id="email"
           nameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"/>
    <AttributeDecoder xsi:type="ScopedAttributeDecoder"/>
 </Attribute>

I would appreciate any suggestions, and I will try to provide more information if needed.
-- 
Lars Slettjord