[EXTERNAL] Re: unable to capture eppn information from SAML2/POST at SP

[O'Quinn, Dennis]

Thank you sir…  Right there in the file with a setting of false…  Sorry to ask such a simple question, but, I am drowning in the Shibboleth documentation, and sometimes when I look at something that is what I want, I can’t recognize if for lack of knowing what I am looking at…

Thanks again, Dennis

Dennis O’Quinn | EDW Infrastructure Engineering | NAE115H @ 2250 MTC
The Home Depot | Marietta Technology Center | 2250 Newmarket Parkway | Marietta, GA  30067
•: Direct: 470.689.4513 | Cell: 470.658.1183 | Internal: 24513
•: doq at homedepot.com<mailto:doq at homedepot.com>



From: users <users-bounces at shibboleth.net> On Behalf Of Brent Putman
Sent: Monday, June 11, 2018 5:46 PM
To: Shib Users <users at shibboleth.net>
Subject: [EXTERNAL] Re: unable to capture eppn information from SAML2/POST at SP




On 6/11/18 5:36 PM, O'Quinn, Dennis wrote:



Attributes

eppn: 1 value(s)





However, I cannot find a way to 'see' the value in the eppn variable


On the Session handler in shibboleth2.xml, add the boolean attribute:

<Handler type="Session" Location="/Session" showAttributeValues="true"/>

as documented here:

https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPHandler#NativeSPHandler-SessionHandler<https://urldefense.proofpoint.com/v2/url?u=https-3A__wiki.shibboleth.net_confluence_display_SHIB2_NativeSPHandler-23NativeSPHandler-2DSessionHandler&d=DwMDaQ&c=MtgQEAMQGqekjTjiAhkudQ&r=mn6DeBt1nj8Oqx06pdIK0_n5EfK6FeVHgdjBNpchyro&m=NEUOG_zgop_QTLIds-J2uR-JtPE8TehzUrVE3oVZTeI&s=GzjX5q0xnZ9nt_YyMwrJtPVOl5aPm3hgXLPwd6uUGYE&e=>





 nor whether that value was propagated to the REMOTE_USER variable (which I suspect didn't happen since I am still not getting the expected response in my application)....

To check REMOTE_USER or any other variable, just use a simple CGI script which prints the environment variables.

But basically check that the appropriate config in shibboleth2.xml is correct:

    <ApplicationDefaults entityID="https://sp.test.middleware.georgetown.edu/shibboleth"<https://urldefense.proofpoint.com/v2/url?u=https-3A__sp.test.middleware.georgetown.edu_shibboleth&d=DwMDaQ&c=MtgQEAMQGqekjTjiAhkudQ&r=mn6DeBt1nj8Oqx06pdIK0_n5EfK6FeVHgdjBNpchyro&m=NEUOG_zgop_QTLIds-J2uR-JtPE8TehzUrVE3oVZTeI&s=0GDMRyr9bSORGpShSxsqZ25jrY6ZOpAJxtJdWcW_A5o&e=>
                         REMOTE_USER="eppn persistent-id targeted-id">
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20180611/f3aeae2d/attachment.html>