SP removing attribute value

Cathy Scott cathystill at gmail.com
Fri Jul 21 15:55:04 EDT 2017


Hello,

Running the current version of Shibboleth SP with Apache HTTPD for a Java
app on Windows. Client IdP is PingFederate.  Attribute released is eppn.
Shibboleth creates the attribute mapping. But then removes the value.
Users can successfully authenticate but no attribute is passed. Hoping that
someone can help me resolve this issue.  Here are log excerpts.

INFO Shibboleth.AttributeExtractor.XML : loaded XML resource
(C:/opt/shibboleth-sp/etc/shibboleth/attribute-map.xml)
INFO Shibboleth.AttributeExtractor.XML : creating mapping for Attribute
urn:oid:1.3.6.1.4.1.5923.1.1.1.6
WARN Shibboleth.AttributeFilter [1]: removed value at position (0) of
attribute (eppn) from (https://institution.edu)
WARN Shibboleth.AttributeFilter [1]: no values left, removing attribute
(eppn) from (https://institution.edu)
INFO Shibboleth.SessionCache [1]: new session created: ID
(_xxxxxxxxxxxxxxxxxx) IdP (https://institution.edu)
Protocol(urn:oasis:names:tc:SAML:2.0:protocol) Address (xx.xx.xx.xx)

>From Transaction Log:
INFO Shibboleth-TRANSACTION [1]: New session (ID: _xxxxxxxxxxxxxxxxxx) with
(applicationId: default) for principal from (IdP: https://institution.edu)
at (ClientAddress: xx.xx.xx.xx) with (NameIdentifier: username) using
(Protocol: urn:oasis:names:tc:SAML:2.0:protocol) from (AssertionID:
v.laC4-70jpF7jhgEnJCSPWqg6C)
INFO Shibboleth-TRANSACTION [1]: Cached the following attributes with
session (ID: _xxxxxxxxxxxxxxxxxx) for (applicationId: default) {
INFO Shibboleth-TRANSACTION [1]: }

Thank,
Cathy
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170721/71b0bd7e/attachment.html>


More information about the users mailing list