IDPv3 Attribute Resolver help

[Dave Perry]

I think this is what you need:
https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPAddAttribute

Basically you need to check the SP is set to receive any attributes from an IdP, before trying to get your webapp to see them.
I speak having implemented Shibboleth SSO into moodle (a couple of years ago, but it was working on a test site).


HTH,
Dave

_________________________________________________
Dave Perry
eLearning Technologist, Hull College Group (Monday - Thursday)

Room L34 - Queens Gardens Library
Wilberforce Drive, Queen's Gardens, Hull, HU1 3DG
Extension 2230 / Direct Dial 01482 381930

* Need a fast reply? Try elearning at hull-college.ac.uk *


-----Original Message-----
From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Tim Williams
Sent: 15 November 2016 14:03
To: Shib Users
Subject: Re: IDPv3 Attribute Resolver help

Ok, so I'm still having trouble with this. As mentioned in my previous email, the attributes are now being retrieved from AD and are correctly displayed on the Information Release page, but are never recieved by the SP software (in this case Moodle). The attribute ID's configured as far as I can tell.

In the Moodle code, the Shibboleth attributes are being looked for in the PHP $_SERVER variable, eg for :

        <AttributeRule attributeID="uid">
            <PermitValueRule xsi:type="ANY" />
        </AttributeRule>

Should be read as $_SERVER['uid']. I've done some debug at the Moodle end and none of the attributes listed on the Information Release page is being passed through, although the other Shibboleth headers are present, eg:

[Shib-Application-ID] => default

Any ideas on what might be missing from my Shib config that might be preventing these parameters from being passed through even though they have been authorised? I do note that the ID in the headers says default, which isn't the ID I used in the attribute-filter config. That said, I tried changing this to default and it did no good.

Thanks again, Tim W

--
Tim Williams BSc MSc MBCS
AutoTrain
58 Jacoby Place
Priory Road
Edgbaston
Birmingham
B5 7UW
United Kingdom

Web : http://www.autotrain.org, http://www.utrain.info Tel : +44 (0)844 487 4117

AutoTrain is a trading name of EuroMotor-AutoTrain LLP Registered in the United Kingdom, number: OC317070.
--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net

**********************************************************************
This message is sent in confidence for the addressee
only. It may  contain confidential or sensitive
information.  The contents are not to be disclosed
to anyone other than the addressee.  Unauthorised
recipients are requested to preserve this
confidentiality and to advise us of any errors in
transmission.  Any views expressed in this message
are solely the views of the individual and do not
represent the views of the College.  Nothing in this
message should be construed as creating a contract.

Hull College Group owns the email infrastructure, including the contents.

Hull College Group is committed to sustainability, please reflect before printing this email.
**********************************************************************

TEXT