Need assistance releasing Active Directory "employeeID" attribute

[Edward Patri]

Hi Matt,

Yes, I modified the attribute-filter.xml to release the attribute. In my ldap.properties I have the following line
idp.attribute.resolver.LDAP.returnAttributes= *

shouldn’t that return all of the LDAP properties. EmployeeID is one of the built in attributes within active directory, shouldn’t this be returned with the above setting.
​​​​​
Edward Patri
Networking Services
CUNY - College of Staten Island
2800 Victory Blvd 2A-300
Staten Island, NY 10314
Office: (718) 982-2705
Edward.Patri at csi.cuny.edu<mailto:Edward.Patri at csi.cuny.edu>

From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Matt Brennan
Sent: Monday, January 23, 2017 3:05 PM
To: Shib Users <users at shibboleth.net>
Cc: Stanley Tse <Stanley.Tse at csi.cuny.edu>
Subject: Re: Need assistance releasing Active Directory "employeeID" attribute

Did you add the attribute "employeeID" to the config setting "idp.attribute.resolver.LDAP.returnAttributes" in ldap.properties?

Also, did you add the configuration to release the attribute to your service provider in attribute-filter.xml?

-Matt

On Mon, Jan 23, 2017 at 2:50 PM, Edward Patri <Edward.Patri at csi.cuny.edu<mailto:Edward.Patri at csi.cuny.edu>> wrote:
Hello All,

As the subject says I need some assistance. I would like to release the following Active Directory attribute to a SP but am unable to locate the attribute “employeeID” in the attribute-resolver.xml file. I tried to create a new Attribute Definition but sadly this did not work.

<resolver:AttributeDefinition xsi:type="ad:Simple" id="employeeID" sourceAttributeID="employeeID">
        <resolver:Dependency ref="myLDAP" />
        <resolver:AttributeEncoder xsi:type="enc:SAML1String" name="urn:mace:dir:attribute-def:employeeID" encodeType="false" />
        <resolver:AttributeEncoder xsi:type="enc:SAML2String" name="urn:oid:1.2.840.113556.1.4.35" friendlyName="employeeID" encodeType="false" />
    </resolver:AttributeDefinition>


Any assistance is greatly appreciated.
​​​​​


--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net<mailto:users-unsubscribe at shibboleth.net>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170123/b4ca16df/attachment.html>