how to add a non-single valued attribute, like memberOf

Clayton upnyhgb8v6 at snkmail.com
Wed Nov 8 17:35:21 EST 2017


And there it is.  The attribute is indeed being sent over!  It was every
bit as simple as just added the new attribute to the resolver.  
Not sure why my CGI script wasn't showing it, but it's going to the server.

How much does the OID matter?

Thanks!
--Clayton

"Shib Users users-at-shibboleth.net |Shib|" <3unnche4it at sneakemail.com> on
Wednesday, November 08, 2017 at 5:31 PM -0500 wrote:
>That's correct, it's the Syntax OID.  I thought the OID used by one of
>the other attributes we're sending was using the Syntax one.  There's
>also a Numeric OID that I've tried.
>
>I'm determining that the IdP isn't sending the new attribute by looking
>at the output of a simple CGI script I wrote that lives on a server we
>have running the Shibboleth SP.  I haven't actually looked at the XML
>being sent to that server yet.
>
>--Clayton
>
>"Shib Users users-at-shibboleth.net |Shib|" <[
>mailto:3unnche4it at sneakemail.com ]3unnche4it at sneakemail.com> on
>Wednesday, November 08, 2017 at 5:23 PM -0500 wrote:
>On 11/8/17, 5:20 PM, "users on behalf of Domingues, Michael D"  wrote:
>
>> Also, the attribute names you are using seem to be incorrect. As far as
>I can tell, that OID doesn't resolve to anything.
>
>I believe it's the OID for "this attribute's syntax is that of a DN". So
>definitely not what one would use, but does appear to be an actual OID.
>
>-- Scott
>
>
>-- 
>For Consortium Member technical support, see [
>https://wiki.shibboleth.net/confluence/x/coFAAg
>]https://wiki.shibboleth.net/confluence/x/coFAAg
>


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20171108/970615be/attachment.html>


More information about the users mailing list