unable to capture eppn information from SAML2/POST at SP
Peter Schober
peter.schober at univie.ac.at
Mon Jun 11 14:34:25 EDT 2018
* Domingues, Michael D <michael-domingues at uiowa.edu> [2018-06-11 20:32]:
> The "name" attribute on the entry in your attribute-map.xml file
> needs to exactly match what the desired attribute is being encoded
> as in the SAML assertion. In the config listed below, you're
> encoding the attribute as "eppn" but trying to capture it as
> "urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified".
He still needs to set the nameformat to unspecified since the SP
defaults to uri naming.
Of course the attribute is completely and utterly broken as any
attribute ever could be (cf my previous mail), so I'd rather fix it at
the IDP. If done correctly by the IDP the SP will Just Work.
-peter
More information about the users
mailing list