Issue with releasing eduPersonPrincipalName to Specific SP

Cantor, Scott cantor.2 at osu.edu
Wed Apr 26 17:23:56 EDT 2017


On 4/26/17, 2:49 PM, "users on behalf of Brent Putman" <users-bounces at shibboleth.net on behalf of putmanb at georgetown.edu> wrote:

>> However, when I check our configuration using AACLI it shows that the attribute is being sucessfully released to their SP.
>
> Well, actually it doesn't.  There is no AttributeStatement there either. See below.

His original JSON output does, though, and it raises more confusion because that looks like the output of the V3 AACLI (the JSON format), but the command line includes options specific to V2, so without more information I don't know what's going on.

In any case, in V3 the JSON output is essentially going to tell you what raw data *would* be in the SAML if you have the proper attribute encoders in place, and what was posted seemed to me to have the appropriate encoders.

So I have no explanation for this, leading me to conclude that one or more of the provided samples is not in fact true.

-- Scott




More information about the users mailing list