SP unable to extract attributes -- skipping unmapped SAML 2.0 Attribute

[Reid Watson]

Hi Everyone,

I have an issue where my SP is ignoring the following attributes and I was wondering if someone could point me in the right direction  

Version: Shibboleth SP Version 2.5.3

1. Sample Response 

<saml:Attribute Name="urn:nzl:govt:ict:stds:authn:safeb64:attribute:igovt:IVS:Assertion:Identity" NameFormat="urn:oasis:name:tc:SAML:2.0:attrname-format:uri"><saml:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" 
xsi:type="xs:string">PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiIHN0YW5kYWxvbmU9InllcyI_PjxuczQ6UGFydHkgeG1sbnM6bnMxPSJ1cm46b2FzaXM6bmFtZXM6dGM6Y2lxOnhubDozIiB4bWxuczpuczI9InVybjpvYXNpczpuYW1lczp0YzpjaXE6Y3Q6MyIgeG1sbnM6bnMzPSJodHRwOi8vd3d3LnczLm9yZy8xOTk5L3hsaW5rIiB4bWxuczpuczQ9InVybjpvYXNpczpuYW1lczp0YzpjaXE
6eHBpbDozIiB4bWxuczpuczU9InVybjpvYXNpczpuYW1lczp0YzpjaXE6eGFsOjMiIHhtbG5zOm5zNj0idXJuOm56bDpnb3Z0OmljdDpzdGRzOmF1dGhuOmRlcGxveW1lbnQ6R0xTOkNvbnRhY3REZXRhaWxzOnYxIj48bnM0OlBhcnR5TmFtZT48bnMxOlBlcnNvbk5hbWUgbnMyOkRhdGFRdWFsaXR5VHlwZT0iVmFsaWQiPjxuczE6TmFtZUVsZW1lbnQgbnMxOkVsZW1lbnRUeXBlPSJGaXJzdE5hbWUiPkdlb3JnZTwvbnM
xOk5hbWVFbGVtZW50PjxuczE6TmFtZUVsZW1lbnQgbnMxOkVsZW1lbnRUeXBlPSJNaWRkbGVOYW1lIj5Kb2huPC9uczE6TmFtZUVsZW1lbnQ-PG5zMTpOYW1lRWxlbWVudCBuczE6RWxlbWVudFR5cGU9Ikxhc3ROYW1lIj5TbWl0aDwvbnMxOk5hbWVFbGVtZW50PjwvbnMxOlBlcnNvbk5hbWU-PC9uczQ6UGFydHlOYW1lPjxuczQ6UGVyc29uSW5mbyBuczQ6R2VuZGVyPSJNIi8-PG5zNDpCaXJ0aEluZm8gbnMyOkRhdGF
RdWFsaXR5VHlwZT0iVmFsaWQiPjxuczQ6QmlydGhJbmZvRWxlbWVudCBuczQ6VHlwZT0iQmlydGhZZWFyIj4xOTY4PC9uczQ6QmlydGhJbmZvRWxlbWVudD48bnM0OkJpcnRoSW5mb0VsZW1lbnQgbnM0OlR5cGU9IkJpcnRoTW9udGgiPjEyPC9uczQ6QmlydGhJbmZvRWxlbWVudD48bnM0OkJpcnRoSW5mb0VsZW1lbnQgbnM0OlR5cGU9IkJpcnRoRGF5Ij4wNzwvbnM0OkJpcnRoSW5mb0VsZW1lbnQ-PG5zNDpCaXJ0aFB
sYWNlRGV0YWlscyBuczI6RGF0YVF1YWxpdHlUeXBlPSJWYWxpZCI-PG5zNTpDb3VudHJ5PjxuczU6TmFtZUVsZW1lbnQgbnM1Ok5hbWVUeXBlPSJOYW1lIj5HcmVhdCBCcml0YWluPC9uczU6TmFtZUVsZW1lbnQ-PC9uczU6Q291bnRyeT48bnM1OkxvY2FsaXR5PjxuczU6TmFtZUVsZW1lbnQgbnM1Ok5hbWVUeXBlPSJOYW1lIj5DaHJpc3RjaHVyY2g8L25zNTpOYW1lRWxlbWVudD48L25zNTpMb2NhbGl0eT48L25zNDp
CaXJ0aFBsYWNlRGV0YWlscz48L25zNDpCaXJ0aEluZm8-PC9uczQ6UGFydHk-</saml:AttributeValue>


- The session handler "Shibboleth.sso/Session” isn’t returning the attributes 

*****************
Miscellaneous
Session Expiration (barring inactivity): 478 minute(s)
Client Address: 10.6.58.5
SSO Protocol: urn:oasis:names:tc:SAML:2.0:protocol
Identity Provider: https://www.ite.account.realme.govt.nz/saml2/assertion
Authentication Time: 2017-08-17T08:18:45Z
Authentication Context Class: urn:nzl:govt:ict:stds:authn:deployment:GLS:SAML:2.0:ac:classes:ModStrength
Authentication Context Decl: (none)

Attributes

*****************

- Attribute.map config for “Attribute with Name: urn:nzl:govt:ict:stds:authn:safeb64:attribute:igovt:IVS:Assertion:Identity, Format:urn:oasis:name:tc:SAML:2.0:attrname-format:uri"

<Attribute name="urn:nzl:govt:ict:stds:authn:safeb64:attribute:igovt:IVS:Assertion:Identity" id="Identity" nameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" >
        <AttributeDecoder xsi:type="StringAttributeDecoder" caseSensitive="false"/>
    </Attribute>


- Log File: shibd.log 

017-08-17 08:40:57 DEBUG Shibboleth.SSO.SAML2 [2]: extracting pushed attributes...
2017-08-17 08:40:57 DEBUG Shibboleth.SSO.SAML2 [2]: extracting pushed attributes...
2017-08-17 08:40:57 DEBUG Shibboleth.AttributeExtractor.XML [2]: unable to extract attributes, unknown XML object type: samlp:Response
2017-08-17 08:40:57 DEBUG Shibboleth.AttributeExtractor.XML [2]: skipping unmapped NameID with format (urn:oasis:names:tc:SAML:2.0:nameid-format:transient)
2017-08-17 08:40:57 DEBUG Shibboleth.AttributeExtractor.XML [2]: unable to extract attributes, unknown XML object type: saml:AuthnStatement
2017-08-17 08:40:57 INFO Shibboleth.AttributeExtractor.XML [2]: skipping unmapped SAML 2.0 Attribute with Name: urn:nzl:govt:ict:stds:authn:attribute:igovt:IVS:FIT, Format:urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified
2017-08-17 08:40:57 INFO Shibboleth.AttributeExtractor.XML [2]: skipping unmapped SAML 2.0 Attribute with Name: urn:nzl:govt:ict:stds:authn:safeb64:attribute:igovt:IVS:Assertion:Identity, Format:urn:oasis:name:tc:SAML:2.0:attrname-format:uri
2017-08-17 08:40:57 INFO Shibboleth.AttributeExtractor.XML [2]: skipping unmapped SAML 2.0 Attribute with Name: urn:nzl:govt:ict:stds:authn:safeb64:attribute:NZPost:AVS:Assertion:Address, Format:urn:oasis:name:tc:SAML:2.0:attrname-format:uri
2017-08-17 08:40:57 DEBUG Shibboleth.SSO.SAML2 [2]: resolving attributes...
2017-08-17 08:40:57 DEBUG Shibboleth.SSO.SAML2 [2]: resolving attributes...
2017-08-17 08:40:57 DEBUG Shibboleth.AttributeResolver.Query [2]: found AttributeStatement in input to new session, skipping query
2017-08-17 08:40:57 DEBUG Shibboleth.SessionCache [2]: creating new session
2017-08-17 08:40:57 DEBUG XMLTooling.XMLObject [2]: starting to marshal saml:NameID


Any help or advice would be appreciated 

Cheers

Reid