ADFS to Shibboleth

[Nancy Kerr]

I removed the space. Now nothing is being sent.


Nancy A. Kerr
LAN Administrator
Mount Saint Vincent University
166 Bedford Highway
Halifax, NS  B3M 2J6

Tel: (902) 457-6685
Fax: (902) 445-4121
www.msvu.ca<http://www.msvu.ca/>

From: users <users-bounces at shibboleth.net> On Behalf Of Nate Klingenstein
Sent: Wednesday, June 27, 2018 3:30 PM
To: Shib Users <users at shibboleth.net>
Subject: Re: ADFS to Shibboleth

Nancy,

It might be a copy/paste issue, but you have a space in the property you defined for UPN:

Properties["http://schemas.xmlsoap.org/ws/2005/05/identity/claimpropert ies/attributename"

I don't know enough about claim configuration to be much more useful than that, but it seems like a good thing to check.

Thanks,
Nate.


On Wed, Jun 27, 2018 at 11:23 AM, Nancy Kerr <Nancy.Kerr at msvu.ca<mailto:Nancy.Kerr at msvu.ca>> wrote:
We are trying to transfer the info that is in the EmployeeID attribute in AD to a Shibboleth.  We have the following claim rules set-up.


c:[Type == "http://schemas.microsoft.com/ws/2008/06/identity/claims/windowsaccountname", Issuer == "AD AUTHORITY"]
=> issue(store = "Active Directory", types = ("EmployeeID"), query = ";employeeID;{0}", param = c.Value);


c:[Type == "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/upn"]
=> issue(Type = "urn:oid:1.3.6.1.4.1.5923.1.1.1.6", Value = c.Value, Properties["http://schemas.xmlsoap.org/ws/2005/05/identity/claimpropert ies/attributename"] = "urn:oasis:names:tc:SAML:2.0:attrnameformat:uri");

The only info that that is being sent is the e-mail address.

Nancy


--
For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net<mailto:users-unsubscribe at shibboleth.net>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20180627/cc02eb87/attachment.html>