IdP does not release attributes
Peter Schober
peter.schober at univie.ac.at
Wed Aug 2 11:16:52 EDT 2017
* Riebeling, Sebastian <sebastian.riebeling at rwth-aachen.de> [2017-08-02 16:24]:
> And if the SP can not map the attribute to anything, does the
> transaction.log stays empty?
Yes, it's in shibd.log where you'll find it's "skipping" an unmapped
attribute with the name "0.9.2342.19200300.100.1.1".
> The SP does detect attributes which are released when I try it with
> the testshib.org IdP, which got me confused.
That's because testshib releases at least some attributes that are
active in the default attribute-map.xml. Your IDP on the other hand
only released uid and you did not uncomment the existing line in your
attribute-map.xml.
Anyway, glad you were able to solve the issue and you've now learned
at which logs on which end to look.
-peter
More information about the users
mailing list