Unable to make Shib Attribute Query

[Chauhan, Somya (ELS-CON)]

Yes, we are using Shibboleth at both the ends . We upgraded shibboleth version from 2.4 to 2.6 .
We have a requirement when a user is able to log in successfully for the very first time, so if after certain period of time user tries to access the federation, user should not prompt to enter the credentials again. 
To achieve this functionality we are using attribute query. To make an attribute query we are facing some issues.

I have attached  the request and response what we are trying. Correct me what I am missing .


-----Original Message-----
From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Cantor, Scott
Sent: Wednesday, June 07, 2017 9:26 AM
To: Shib Users
Subject: Re: Unable to make Shib Attribute Query 

*** External email: use caution ***



On 6/7/17, 9:23 AM, "users on behalf of Chauhan, Somya (ELS-CON)" <users-bounces at shibboleth.net on behalf of s.chauhan at elsevier.com> wrote:

> Scott can you help us, what be the could  the correct way to validate the attribute query?

I'm asking you, for the third time:

- is Shibboleth being used at either end of this?
- why are you using queries?

> Through WAYF link, we are able to login successfully, but how to check for the attribute query

You don't need queries if there's a WAYF involved because that's SSO, and SSO does not need to involve making queries, that's just an old SAML 1.1 hack that's no longer relevant.

-- Scott



--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
-------------- next part --------------
An embedded message was scrubbed...
From: "Chauhan, Somya (ELS-CON)" <s.chauhan at elsevier.com>
Subject: Unable to make Shib Attribute Query 
Date: Wed, 7 Jun 2017 10:12:41 +0000
Size: 8675
URL: <http://shibboleth.net/pipermail/users/attachments/20170607/dc71dd5b/attachment-0001.mht>