Shibboleth IDP 3 and Onelogin PHP SAML library

[Nate Klingenstein]

2017-06-21 19:51:31,493 - DEBUG
[net.shibboleth.idp.attribute.resolver.impl.AttributeResolverImpl:236]
- Attribute Resolver 'ShibbolethAttributeResolver': Final resolved
attribute collection: [lastName, firstName, uid, mail, surname,
givenName, email]
2017-06-21 19:51:31,527 - DEBUG
[net.shibboleth.idp.attribute.filter.impl.AttributeFilterImpl:125] -
Attribute filtering engine 'ShibbolethAttributeFilter'  Beginning
process of filtering the following 7 attributes: [lastName, firstName,
uid, mail, surname, givenName, email]

leading to

2017-06-21 19:51:31,530 - DEBUG
[net.shibboleth.idp.attribute.filter.impl.AttributeFilterImpl:176] -
Attribute filtering engine 'ShibbolethAttributeFilter': no policy
permitted release of attribute mail values
2017-06-21 19:51:31,530 - DEBUG
[net.shibboleth.idp.attribute.filter.impl.AttributeFilterImpl:176] -
Attribute filtering engine 'ShibbolethAttributeFilter': no policy
permitted release of attribute surname values
2017-06-21 19:51:31,530 - DEBUG
[net.shibboleth.idp.attribute.filter.impl.AttributeFilterImpl:176] -
Attribute filtering engine 'ShibbolethAttributeFilter': no policy
permitted release of attribute givenName values
2017-06-21 19:51:31,530 - DEBUG
[net.shibboleth.idp.attribute.filter.impl.AttributeFilterImpl:176] -
Attribute filtering engine 'ShibbolethAttributeFilter': no policy
permitted release of attribute email values

leading to

017-06-21 19:51:32,456 - DEBUG
[net.shibboleth.idp.saml.nameid.impl.AttributeSourcedSAML2NameIDGenerator:197]
- Checking for source attribute mail
2017-06-21 19:51:32,456 - INFO
[net.shibboleth.idp.saml.nameid.impl.AttributeSourcedSAML2NameIDGenerator:227]
- Attribute sources [mail] did not produce a usable identifier
2017-06-21 19:51:32,457 - DEBUG
[org.opensaml.saml.saml2.profile.AbstractSAML2NameIDGenerator:92] - No
identifier to use
2017-06-21 19:51:32,457 - WARN
[org.opensaml.saml.saml2.profile.impl.AddNameIDToSubjects:337] -
Profile Action AddNameIDToSubjects: Request specified use of an
unsupportable identifier format:
urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress
2017-06-21 19:51:32,492 - WARN
[org.opensaml.profile.action.impl.LogEvent:105] - A non-proceed event
occurred while processing the request: InvalidNameIDPolicy
2017-06-21 19:51:32,493 - DEBUG
[org.opensaml.saml.common.profile.logic.DefaultLocalErrorPredicate:184]
- Error event InvalidNameIDPolicy will be handled with response

because

2017-06-21 19:51:31,528 - DEBUG
[net.shibboleth.idp.attribute.filter.AttributeFilterPolicy:137] -
Attribute Filter Policy 'whenIwork'  Policy is not active for this
request

because

    <saml:Issuer>https://app.example.com/rest/saml/meta/682879</saml:Issuer>

which != https://saml.example.com/682879"