InCommon Issues

[Ryan Suarez]

Test with aacli.sh, ie:

/opt/shibboleth-idp/bin/aacli.sh --configDir /opt/shibboleth-idp/conf --principal=[someuser] --requester https://fm.incommon.org/sp

________________________________________
From: users [users-bounces at shibboleth.net] on behalf of Piscitello, Frank [FPiscitello at wcupa.edu]
Sent: October 17, 2016 2:10 PM
To: users at shibboleth.net
Subject: InCommon Issues

For some reason, I can’t log in with our Shib 3 IdP for InCommon SP systems. Below is my filter.xml. Any thoughts?

<AttributeFilterPolicyGroup id="ShibbolethFilterPolicy"
        xmlns="urn:mace:shibboleth:2.0:afp"
        xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
        xsi:schemaLocation="urn:mace:shibboleth:2.0:afp http://shibboleth.net/schema/idp/shibboleth-afp.x
sd">

    <!-- Release some attributes to an SP. -->
    <AttributeFilterPolicy id="example1">
        <PolicyRequirementRule xsi:type="Requester" value="https://fm.incommon.org/sp" />

        <AttributeRule attributeID="eduPersonPrincipalName">
            <PermitValueRule xsi:type="ANY" />
        </AttributeRule>

        <AttributeRule attributeID="givenName">
            <PermitValueRule xsi:type="ANY" />
        </AttributeRule>

        <AttributeRule attributeID="surname">
            <PermitValueRule xsi:type="ANY" />
        </AttributeRule>

        <AttributeRule attributeID="commonName">
            <PermitValueRule xsi:type="ANY" />
        </AttributeRule>

        <AttributeRule attributeID="mail">
            <PermitValueRule xsi:type="ANY" />
        </AttributeRule>
    </AttributeFilterPolicy>

[NCSAM+Champion+SM]<http://www.dhs.gov/national-cyber-security-awareness-month>
Frank J. Piscitello, Jr., CISSP<https://www.youracclaim.com/badges/f057110b-f57e-4ad6-b4dd-342efd4bb5d8/public_url>
Information Security Manager
West Chester University of PA





Networking & Telecom / Information Security
West Chester, PA 19383
Ph: 610-436-3192 | Fax: 610-436-3110
FPiscitello at wcupa.edu<mailto:FPiscitello at wcupa.edu>
http://wcupa.edu/infoservices/security/

#CyberAware



-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 22784 bytes
Desc: image001.png
URL: <http://shibboleth.net/pipermail/users/attachments/20161017/bfbf7a6f/attachment-0001.png>