Shibboleth issue

Dinesh Chaminda dineshsecret at gmail.com
Thu Nov 2 09:37:54 EDT 2017


Hi There,
   Don't worry about the question I asked earlier. I figured it out how to
get the attributes to the ASP.net app.
I had to change the attribute-map.xml file and the attribute policy file.
Then the attributes exposed to the ASP.net app via Request.ServerVariables.

Thank you very much for your help.

regards
-Dinesh

On Thu, Nov 2, 2017 at 11:50 PM, Dinesh Chaminda <dineshsecret at gmail.com>
wrote:

> Further to the above question I had asked, Should I have to update
> attribute policy file?
> All the attribute values what my idp provide are string values
>
> Kind regards
> -Dinesh
>
> On Thu, Nov 2, 2017 at 11:02 PM, Dinesh Chaminda <dineshsecret at gmail.com>
> wrote:
>
>> Thank you for the doc. I don't get, how to specify the attribute in the
>> attribute map xml file.
>> for example, I have a attribute called tr.com.app1.accessLevel
>>
>> So I added a attribute like below into the attribute-map.xml file
>> <Attribute name="tr.com.app1.accessLevel" id="accessLevel"
>> nameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"/>
>>
>> is that correct?
>>
>> then where can I extract the this attribute in my app? does it from
>> Request.Headers?
>>
>> please help me out on this.
>>
>> Kind reagards
>> -Dinesh
>>
>> On Thu, Nov 2, 2017 at 8:56 PM, Rod Widdowson <rdw at steadingsoftware.com>
>> wrote:
>>
>>> https://wiki.shibboleth.net/confluence/display/SHIB2/NativeS
>>> PAttributeAccess
>>>
>>>
>>>
>>> *From:* users [mailto:users-bounces at shibboleth.net] *On Behalf Of *Dinesh
>>> Chaminda
>>> *Sent:* 02 November 2017 09:41
>>> *To:* Shib Users
>>> *Subject:* Re: Shibboleth issue
>>>
>>>
>>>
>>> Thank you. This issue has now resolved with you your help.
>>>
>>> It's redirecting to the url (a page) that I nominated in the Shibboleth
>>> config file
>>>
>>> Now I want to know, how to access my IDP's attributes via ASP.net code.
>>>
>>>
>>>
>>> Appreciate your help
>>>
>>>
>>>
>>> regards
>>>
>>> -Dinesh
>>>
>>>
>>>
>>> On Thu, Nov 2, 2017 at 5:42 PM, rdw at steadingsoftware.com <
>>> rdw at steadingsoftware.com> wrote:
>>>
>>> And make sure that you SP is time synching correctly, especially if it
>>> is in a VM.
>>>
>>> Sent from my iPad
>>>
>>>
>>> > On 2 Nov 2017, at 04:09, Nate Klingenstein <ndk at sudonym.me> wrote:
>>> >
>>> > Dinesh,
>>> >
>>> > I think the error explains itself.  I don't know this part of the
>>> > spec, but the SP does, so taking it at its word, the Conditions in the
>>> > SAML assertion must have a NotBefore and a NotOnOrAfter.  Check with
>>> > the IdP to see why they're sending non-conforming messages.
>>> >
>>> > Take care,
>>> > Nate.
>>> >
>>> >> On Wed, Nov 1, 2017 at 7:55 PM, Dinesh Chaminda <
>>> dineshsecret at gmail.com> wrote:
>>> >> Hi There,
>>> >>  I setup Shibboleth 2.5.0 in my IIS6, I'm getting below error
>>> >>
>>> >> xmltooling::ValidationException
>>> >>
>>> >> The system encountered an error at Thu Nov 02 13:53:56 2017
>>> >>
>>> >> To report this problem, please contact the site administrator at
>>> >> dinesha at localhost.com.au.
>>> >>
>>> >> Please include the following message in any email:
>>> >>
>>> >> xmltooling::ValidationException at
>>> >> (http://localhost/Shibboleth.sso/SAML2/POST)
>>> >>
>>> >> Conditions must have NotBefore or NotOnOrAfter
>>> >>
>>> >>
>>> >> what am I missing here. Please help
>>> >>
>>> >> Regards
>>> >>
>>> >> -Dinesh
>>> >>
>>> >>
>>> >> --
>>> >> To unsubscribe from this list send an email to
>>> >> users-unsubscribe at shibboleth.net
>>> > --
>>> > To unsubscribe from this list send an email to
>>> users-unsubscribe at shibboleth.net
>>>
>>> --
>>> To unsubscribe from this list send an email to
>>> users-unsubscribe at shibboleth.net
>>>
>>>
>>>
>>> --
>>> To unsubscribe from this list send an email to
>>> users-unsubscribe at shibboleth.net
>>>
>>
>>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20171103/247d4052/attachment.html>


More information about the users mailing list