map attribute in SP

Qian, Yi yqian at ku.edu
Fri Jan 20 13:54:35 EST 2017


Hello,

We set up SimpleSamlPhp proxy in our test environment, and release sn, givenName and mail just for testing. Both IdP and SP are Shibboleth

What I did on SP side is just uncomment sn, givenName, mail in attribute-map.xml file. But SP does not display the attributes, bump up the log level, I see in shibd.log
"skipping unmapped SAML 2.0 Attribute with Name: urn:oid:2.5.4.4, Format:urn:oasis:names:tc:SAML:2.0:attrname-format:basic".

I can see the attributes are in the assertion passed through by SimpleSamlPhp proxy,
"Jan 20 17:53:50 simplesamlphp DEBUG [aba6e60d82]       <saml:Attribute Name="urn:oid:2.5.4.4" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
Jan 20 17:53:50 simplesamlphp DEBUG [aba6e60d82]         <saml:AttributeValue xsi:type="xs:string">Qian</saml:AttributeValue>
Jan 20 17:53:50 simplesamlphp DEBUG [aba6e60d82]       </saml:Attribute>"

Where did I miss out?

Yi
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170120/38b69660/attachment.html>


More information about the users mailing list