Canvas -- Attributes

[Jim Fox]

Is it really "example.instructure.com"?

Jim


On Mon, 26 Jun 2017, Joshua Brodie wrote:

> Date: Mon, 26 Jun 2017 10:15:15
> From: Joshua Brodie <josbrodie at gmail.com>
> To: users <users at shibboleth.net>
> Reply-To: Shib Users <users at shibboleth.net>
> Subject: Canvas -- Attributes
> 
> Canvas on V3 does not appear to be receiving attributes after successful auth (nameID is fine)-- all is well with the attribute-filter and
> attribute-resolver (over 300 integration successful).
> 
> The idp-process.log also concur that the attributes are not sent (nameID is received).
> 
> We think it could be relying-party.xml ----- have we missed anything here?
> 
> 
> <bean parent="RelyingPartyByName"
>                     c:relyingPartyIds="#{{'http://example.instructure.com/saml2'}}">
>             <property name="profileConfigurations">
>                 <list>
>                     <bean parent="Shibboleth.SSO" />
>                     <bean   parent="SAML2.SSO"
>                                p:encryptAssertions="false"
>                             p:includeAttributeStatement="false"
>                             p:signAssertions="false"
>                             p:encryptNameIDs="false"
>                             p:nameIDFormatPrecedence="#{{'urn:oasis:names:tc:SAML:2.0:nameid-format:unspecified'}}" />
>                     <ref bean="SAML2.Logout" />
>                 </list>
>             </property>
>       </bean>
> 
>