Canvas -- Attributes

[Joshua Brodie]

Typo -- it's as follows:

<AttributeFilterPolicy id="http://example.instructure.com/saml2">
        <PolicyRequirementRule xsi:type="Requester"
                           value="http://example.instructure.com/saml2"/>

        <AttributeRule attributeID="NameID">
                    <PermitValueRule xsi:type="ANY"/>
                </AttributeRule>

                <AttributeRule attributeID="ubcEduStudentNumber">
            <PermitValueRule xsi:type="ANY" />
        </AttributeRule>

         <AttributeRule attributeID="givenName">
                <PermitValueRule xsi:type="ANY" />
        </AttributeRule>

        <AttributeRule attributeID="sn">
                <PermitValueRule xsi:type="ANY" />
        </AttributeRule>

        <AttributeRule attributeID="mail">
            <PermitValueRule xsi:type="ANY"/>
        </AttributeRule>

    </AttributeFilterPolicy>

On 26 June 2017 at 10:15, Joshua Brodie <josbrodie at gmail.com> wrote:

> Canvas on V3 does not appear to be receiving attributes after successful
> auth (nameID is fine)-- all is well with the attribute-filter and
> attribute-resolver (over 300 integration successful).
>
> The idp-process.log also concur that the attributes are not sent (nameID
> is received).
>
> We think it could be relying-party.xml ----- have we missed anything here?
>
>
> <bean parent="RelyingPartyByName"
>                     c:relyingPartyIds="#{{'http://
> example.instructure.com/saml2'}}">
>             <property name="profileConfigurations">
>                 <list>
>                     <bean parent="Shibboleth.SSO" />
>                     <bean   parent="SAML2.SSO"
>                                p:encryptAssertions="false"
>                             p:includeAttributeStatement="false"
>                             p:signAssertions="false"
>                             p:encryptNameIDs="false"
>                             p:nameIDFormatPrecedence="#{{'
> urn:oasis:names:tc:SAML:2.0:nameid-format:unspecified'}}" />
>                     <ref bean="SAML2.Logout" />
>                 </list>
>             </property>
>       </bean>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170626/61a2dcfa/attachment.html>