Canvas -- Attributes

[Brian Moon]

Looking at our config, the main difference I see is that we have
signAssterions set to true.


Brian Moon
Senior System Administrator
Enterprise Systems
Santa Clara University
Office: 408.554.4830
bmoon at scu.edu

On Mon, Jun 26, 2017 at 10:15 AM, Joshua Brodie <josbrodie at gmail.com> wrote:

> Canvas on V3 does not appear to be receiving attributes after successful
> auth (nameID is fine)-- all is well with the attribute-filter and
> attribute-resolver (over 300 integration successful).
>
> The idp-process.log also concur that the attributes are not sent (nameID
> is received).
>
> We think it could be relying-party.xml ----- have we missed anything here?
>
>
> <bean parent="RelyingPartyByName"
>                     c:relyingPartyIds="#{{'http://
> example.instructure.com/saml2'}}">
>             <property name="profileConfigurations">
>                 <list>
>                     <bean parent="Shibboleth.SSO" />
>                     <bean   parent="SAML2.SSO"
>                                p:encryptAssertions="false"
>                             p:includeAttributeStatement="false"
>                             p:signAssertions="false"
>                             p:encryptNameIDs="false"
>                             p:nameIDFormatPrecedence="#{{'
> urn:oasis:names:tc:SAML:2.0:nameid-format:unspecified'}}" />
>                     <ref bean="SAML2.Logout" />
>                 </list>
>             </property>
>       </bean>
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170626/40c65185/attachment.html>