Need assistance releasing Active Directory "employeeID" attribute

Cantor, Scott cantor.2 at osu.edu
Mon Jan 23 15:06:19 EST 2017


>         <resolver:AttributeEncoder xsi:type="enc:SAML1String"
> name="urn:mace:dir:attribute-def:employeeID" encodeType="false" />

You cannot make up names yourself like that, you don't own that namespace. And you don't need SAML 1.1 support, so don't worry about it. Its name in any case would be the same as in SAML 2.0.

As for the rest, you need to actually describe a specific problem to get help. What did the log tell you? You certainly didn't just change that alone? You can't manufacture an attribute out of thin air. If you tell it to get it from LDAP, then your LDAP connector has to retrieve it. Some people do a search for all attributes but many don't.

-- Scott



More information about the users mailing list