IdP does not release attributes

Cantor, Scott cantor.2 at osu.edu
Wed Aug 2 10:36:57 EDT 2017


On 8/2/17, 10:24 AM, "users on behalf of Riebeling, Sebastian" <users-bounces at shibboleth.net on behalf of sebastian.riebeling at rwth-aachen.de> wrote:

> But isn't it like a default value which is predefined?

What is or isn't defaulted has no bearing on the answer to your question, but "uid" is a very bad federated attribute and the SP doesn't default to supporting it. But defaults don't matter, looking at the logs and configuration is what matters. The log is, I guarantee, telling you the answer to your question, and that it skipped that attribute as unmapped. Did you check it?

> And if the SP can not map the attribute to anything, does the transaction.log stays empty?

That log includes what was locally cached, not what was received.

-- Scott




More information about the users mailing list