Cant seeing all the attributes from headers

[Kenneth Priddy]

Hello,

We have Shibboleth setup as an SP on IIS 8.5. We have setup Shibboleth to
work with several customer using Shibboleth and ones not but I am stumped on
this problem because it is usually a naming problem. 

I am not able to read all of the attributes. I get some of them but am
missing the main ones for the login. If I use SAML Trace in Firefox I can
see all of them but when I have C# try to get them or just give all of them,
there not there.

I get email, first name, and last name. I am not getting PersonImmutableID
or UMHBID. I don't know if this matters but they are using OneLogin.

I am hoping someone can give me an idea of what to look for.

 

Attributes from the SAML Trace:

        <saml:AttributeStatement>

            <saml:Attribute
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"

                            Name="User.LastName"

                            >

                <saml:AttributeValue
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"

                                     xsi:type="xs:string"

                                     >Test Student</saml:AttributeValue>

            </saml:Attribute>

            <saml:Attribute
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"

                            Name="memberOf"

                            >

                <saml:AttributeValue
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"

                                     xsi:type="xs:string"

                                     />

            </saml:Attribute>

            <saml:Attribute
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"

                            Name="PersonImmutableID"

                            >

                <saml:AttributeValue
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"

                                     xsi:type="xs:string"

                                     >123456</saml:AttributeValue>

            </saml:Attribute>

            <saml:Attribute
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"

                            Name="UMHBID"

                            >

                <saml:AttributeValue
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"

                                     xsi:type="xs:string"

                                     >123456</saml:AttributeValue>

            </saml:Attribute>

            <saml:Attribute
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"

                            Name="User.email"

                            >

                <saml:AttributeValue
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"

                                     xsi:type="xs:string"

                                     >teststudent at XXXXX
</saml:AttributeValue>

            </saml:Attribute>

            <saml:Attribute
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"

                            Name="User.FirstName"

                            >

                <saml:AttributeValue
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"

                                     xsi:type="xs:string"

                                     >AMD</saml:AttributeValue>

            </saml:Attribute>

        </saml:AttributeStatement>

 

C# Code:

string log = Request.ServerVariables["ALL_HTTP"]

 

Result of log:

HTTP_CONTENT_LENGTH:0

HTTP_ACCEPT:text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8

HTTP_ACCEPT_ENCODING:gzip, deflate, br

HTTP_ACCEPT_LANGUAGE:en-US,en;q=0.5

HTTP_COOKIE:_shibsession_64656661756c7468747470733a2f2f736869626273702e736d6
17274636174616c6f6769712e636f6d2f73686962626f6c657468=_14e48b52c09bd69887af7
03242bca24e

HTTP_HOST:XXXXX

HTTP_REFERER:XXXXX

HTTP_USER_AGENT:Mozilla/5.0 (Windows NT 6.1; WOW64; rv:51.0) Gecko/20100101
Firefox/51.0

HTTP_DNT:1

HTTP_UPGRADE_INSECURE_REQUESTS:1

HTTP_SHIBSPOOFCHECK:815929323191996468420280380762598221200

HTTP_SHIBAPPLICATIONID:default

HTTP_SHIBSESSIONID:_14e48b52c09bd69887af703242bca24e

HTTP_SHIBIDENTITYPROVIDER:XXXXX

HTTP_SHIBAUTHENTICATIONINSTANT:2017-03-01T15:25:49Z

HTTP_SHIBAUTHENTICATIONMETHOD:urn:oasis:names:tc:SAML:2.0:ac:classes:Passwor
dProtectedTransport

HTTP_SHIBAUTHNCONTEXTCLASS:urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordPr
otectedTransport

HTTP_SHIBSESSIONINDEX:_3a20bbc0-e0c1-0134-8841-064f16870231

HTTP_EMAIL:teststudent at XXXXX

HTTP_FIRSTNAME:AMD

HTTP_LASTNAME:Test Student

 

Our Attribute Mapper:

                <Attribute name="PersonImmutableID"
nameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"
id="PersonImmutableID">

                <AttributeDecoder xsi:type="ScopedAttributeDecoder"/>

                </Attribute>

                

                <Attribute name="UMHBID"
nameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic" id="UMHBID">

                <AttributeDecoder xsi:type="ScopedAttributeDecoder"/>

                </Attribute>

                

                <Attribute name="User.email"
nameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic" id="email">

                <AttributeDecoder xsi:type="ScopedAttributeDecoder"/>

                </Attribute>

 

                <Attribute name="User.FirstName"
nameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"
id="firstName">

                <AttributeDecoder xsi:type="StringAttributeDecoder"/>

                </Attribute>

 

                <Attribute name="User.LastName"
nameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"
id="lastName">

                <AttributeDecoder xsi:type="StringAttributeDecoder"/>

                </Attribute>

 

Thanks,

Kenneth

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170301/858b2b99/attachment-0001.html>