[EXTERNAL] RE: InCommon Issues

[Kabir, Rashed]

Hi Everyone

Still trying to resolve this is issue of any vendor SP's consuming our metadata going through inCommon are not getting any attributes even though we are releasing it on our end.

I tested with aacli.  Also tested it on https://service1.internet2.edu/test/ and it works fine there. 

But failing on the following (example)

https://lists.incommon.org/sympa/sso_login/InCommon/init/sso_login_succeeded/InCommon

and 

https://cm.maxient.com/ssotest.php?method=SAML&school=wcupa




output of aacli below. Appreciate any pointers on this.






/opt/shibboleth-idp/bin# ./aacli.sh --configDir /opt/shibboleth-idp/conf --principal=rkabir at wcupa.edu --requester https://fm.incommon.org/sp

{
"requester": "https://fm.incommon.org/sp",
"principal": "rkabir at wcupa.edu",
"attributes": [


  {
    "name": "commonName",
    "values": [
              "StringAttributeValue{value=RKABIR}"          ]
  },

  {
    "name": "mail",
    "values": [
              "StringAttributeValue{value=RKabir at wcupa.edu}"          ]
  },

  {
    "name": "eduPersonScopedAffiliation",
    "values": [
              "ScopedStringAttributeValue{value=staff, scope=wcupa.edu}"          ]
  },

  {
    "name": "displayName",
    "values": [
              "StringAttributeValue{value=Kabir, Rashed}"          ]
  },

  {
    "name": "eduPersonPrincipalName",
    "values": [
              "ScopedStringAttributeValue{value=RKABIR, scope=wcupa.edu}"          ]
  },

  {
    "name": "givenName",
    "values": [
              "StringAttributeValue{value=Rashed}"          ]
  },

  {
    "name": "sn",
    "values": [
              "StringAttributeValue{value=Kabir}"          ]
  }

]
}






Rashed Kabir
Senior Systems Engineer
Networking and Telecommunications
West Chester University
Office (610) 436-6914

-----Original Message-----
From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Ryan Suarez
Sent: Monday, October 17, 2016 3:41 PM
To: Shib Users <users at shibboleth.net>
Subject: [EXTERNAL] RE: InCommon Issues

Test with aacli.sh, ie:

/opt/shibboleth-idp/bin/aacli.sh --configDir /opt/shibboleth-idp/conf --principal=[someuser] --requester https://fm.incommon.org/sp

________________________________________
From: users [users-bounces at shibboleth.net] on behalf of Piscitello, Frank [FPiscitello at wcupa.edu]
Sent: October 17, 2016 2:10 PM
To: users at shibboleth.net
Subject: InCommon Issues

For some reason, I can't log in with our Shib 3 IdP for InCommon SP systems. Below is my filter.xml. Any thoughts?

<AttributeFilterPolicyGroup id="ShibbolethFilterPolicy"
        xmlns="urn:mace:shibboleth:2.0:afp"
        xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
        xsi:schemaLocation="urn:mace:shibboleth:2.0:afp http://shibboleth.net/schema/idp/shibboleth-afp.x
sd">

    <!-- Release some attributes to an SP. -->
    <AttributeFilterPolicy id="example1">
        <PolicyRequirementRule xsi:type="Requester" value="https://fm.incommon.org/sp" />

        <AttributeRule attributeID="eduPersonPrincipalName">
            <PermitValueRule xsi:type="ANY" />
        </AttributeRule>

        <AttributeRule attributeID="givenName">
            <PermitValueRule xsi:type="ANY" />
        </AttributeRule>

        <AttributeRule attributeID="surname">
            <PermitValueRule xsi:type="ANY" />
        </AttributeRule>

        <AttributeRule attributeID="commonName">
            <PermitValueRule xsi:type="ANY" />
        </AttributeRule>

        <AttributeRule attributeID="mail">
            <PermitValueRule xsi:type="ANY" />
        </AttributeRule>
    </AttributeFilterPolicy>

[NCSAM+Champion+SM]<http://www.dhs.gov/national-cyber-security-awareness-month>
Frank J. Piscitello, Jr., CISSP<https://www.youracclaim.com/badges/f057110b-f57e-4ad6-b4dd-342efd4bb5d8/public_url>
Information Security Manager
West Chester University of PA





Networking & Telecom / Information Security West Chester, PA 19383
Ph: 610-436-3192 | Fax: 610-436-3110
FPiscitello at wcupa.edu<mailto:FPiscitello at wcupa.edu>
http://wcupa.edu/infoservices/security/

#CyberAware



________________________________

This email originated from an off-campus sender. Please be cautious and treat links and attachments with care.