map attribute in SP

[Cantor, Scott]

On 1/20/17, 1:54 PM, "users on behalf of Qian, Yi" <users-bounces at shibboleth.net on behalf of yqian at ku.edu> wrote:

> What I did on SP side is just uncomment sn, givenName, mail in attribute-map.xml file. But SP does not display the
> attributes, bump up the log level, I see in shibd.log “skipping unmapped SAML 2.0 Attribute with Name: urn:oid:2.5.4.4,
> Format:urn:oasis:names:tc:SAML:2.0:attrname-format:basic”.

The documentation [1] is explicit that you can't omit nameFormat in mapping rules for inadvisable formats.

You shouldn't use the basic NameFormat, and you certainly shouldn't use it with URI names. Fix the IdP and use standard attribute naming.
 
-- Scott

[1] https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPAttributeExtractor