AW: IdP does not release attributes

[Riebeling, Sebastian]

I found the source of my error. But now I have changed the settings on both, the idp and sp. 
I now choose the ID to be "entityID="https://sso-med1.imib.rwth-aachen.de/shibboleth"". 

But since I had this "error" in both, the sp and the idp, configuration covered, I am still facing the same problem.


I also turned the "net.shibboleth.idp" and "net.shibboleth.idp.attribute" up to DEBUG, in the "logback.xml". My resulting process is in the appendix (I cut out the attributes part after the session was created I hope this should be enough). 




________________________________________
Von: users <users-bounces at shibboleth.net> im Auftrag von Rod Widdowson <rdw at steadingsoftware.com>
Gesendet: Samstag, 29. Juli 2017 17:22
An: 'Shib Users'
Betreff: RE: IdP does not release attributes

>  <ApplicationDefaults entityID="https://sso-med1.imib.rwth-aachen.de/shibboleth"
>         <SSO entityID="https://sso-med1.imib.rwth-aachen.de/shibboleth">
> <md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" (..) entityID="https://sso-med1.imib.rwth-aachen.de">
> shouldn't these IDs match?

Yes, which probably means that the SP isn’t reading what you think it is.  What does the "Shibboleth.sso/Status" endpoint say?

But note that in your log you have apparently logged in as "https://sso-med1.imib.rwth-aachen.de" (last line).

I think you probably want to chase that down.  There may well be more going on but something is in two minds as to what is going on,
and until such time as you know the SP is reading the configuration you think it is you are wasting you time.

If you need to debug the IdP, you will need to turn up category "net.shibboleth.idp.attribute" as per [1]

[1] https://wiki.shibboleth.net/confluence/display/IDP30/LoggingConfiguration#LoggingConfiguration-LoggingCategories


--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: process
Type: application/octet-stream
Size: 15622 bytes
Desc: process
URL: <http://shibboleth.net/pipermail/users/attachments/20170731/6f7f1086/attachment.obj>