unable to capture eppn information from SAML2/POST at SP

Mon Jun 11 16:44:37 EDT 2018

Well, I have made it this far now...

2018-06-11 16:28:45 DEBUG Shibboleth.AttributeDecoder.String [1]: decoding SimpleAttribute (eppn) from SAML 2 Attribute (eppn) with 1 value(s)
2018-06-11 16:28:45 DEBUG Shibboleth.AttributeFilter [1]: filtering 1 attribute(s) from (https://devsaml.homedepot.com)
2018-06-11 16:28:45 DEBUG Shibboleth.AttributeFilter [1]: applying filtering rule(s) for attribute (eppn) from (https://devsaml.homedepot.com)
2018-06-11 16:28:45 WARN Shibboleth.AttributeFilter [1]: removed value at position (0) of attribute (eppn) from (https://devsaml.homedepot.com)
2018-06-11 16:28:45 WARN Shibboleth.AttributeFilter [1]: no values left, removing attribute (eppn) from (https://devsaml.homedepot.com)

The attribute map I am using to get this is....
   <Attribute name="eppn" id="eppn">
        <AttributeDecoder xsi:type="StringAttributeDecoder" caseSensitive="false"/>
    </Attribute>

So, now on to figuring out the filters....

-----Original Message-----
From: users <users-bounces at shibboleth.net> On Behalf Of Cantor, Scott
Sent: Monday, June 11, 2018 2:34 PM
To: Shib Users <users at shibboleth.net>
Subject: [EXTERNAL] RE: unable to capture eppn information from SAML2/POST at SP

> No. You put the nameformat in the "name" parameter (XML attribute).

Read too fast myself, so the rule is in fact not what was intended. Using name="eppn" id="eppn" would basically work to hack in that particular rule (an absent nameFormat in the rule will match "unspecified").

-- Scott

-- 
For Consortium Member technical support, see https://urldefense.proofpoint.com/v2/url?u=https-3A__wiki.shibboleth.net_confluence_x_coFAAg&d=DwICAg&c=MtgQEAMQGqekjTjiAhkudQ&r=mn6DeBt1nj8Oqx06pdIK0_n5EfK6FeVHgdjBNpchyro&m=EqgCqa3GK9ZMhqG6SmG14-xhAuM8EjiHF7wuN1gaR94&s=EdKLuPQ9vljOXHBr3KgsVyxy8jyalGjrDPLeo-RKuWs&e=
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net