Canvas -- Attributes

[Joshua Brodie]

I may have missed something very obvious in the attribute-filter (snippet
below) --- it's basically the same as other integration in the
attribute-filter.xml.

Puzzling.

We don't suport SAML1.1 -- could that be it?



<AttributeFilterPolicy id="http://example.instructure.com/saml2">
        <PolicyRequirementRule xsi:type="Requester"
                           value="http://ubc.instructure.com/saml2"/>

        <AttributeRule attributeID="NameID">
                    <PermitValueRule xsi:type="ANY"/>
                </AttributeRule>

                <AttributeRule attributeID="ubcEduStudentNumber">
            <PermitValueRule xsi:type="ANY" />
        </AttributeRule>

         <AttributeRule attributeID="givenName">
                <PermitValueRule xsi:type="ANY" />
        </AttributeRule>

        <AttributeRule attributeID="sn">
                <PermitValueRule xsi:type="ANY" />
        </AttributeRule>

        <AttributeRule attributeID="mail">
            <PermitValueRule xsi:type="ANY"/>
        </AttributeRule>

    </AttributeFilterPolicy>

On 26 June 2017 at 10:19, Cantor, Scott <cantor.2 at osu.edu> wrote:

> > Canvas on V3 does not appear to be receiving attributes after successful
> auth
> > (nameID is fine)-- all is well with the attribute-filter and
> attribute-resolver
> > (over 300 integration successful).
>
> It's not, or you'd be releasing attributes, that's purely a filtering
> issue.
>
> > We think it could be relying-party.xml ----- have we missed anything
> here?
>
> It cannot be.
>
> BTW, you don't need to use "unspecified" with Canvas (and therefore you
> should not). I have no special override for Instructure, just a filter in
> the metadata configuration to attach the NameID Format I'm using with their
> service.
>
> I will get that integration documented, that's probably a good next one to
> write up after having done the Workday one.
>
> -- Scott
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170626/11001ec8/attachment.html>