ADFS to Shibboleth

[Peter Schober]

* Nancy Kerr <Nancy.Kerr at msvu.ca> [2018-06-29 14:41]:
> When I view the log file I see that "REMOTE_USER ="

That just means that no attribute which is being mapped to REMOTE_USER
in your shibboleth2.xml was available after filtering.

So have you looked at the Shibboleth SP's log files (as said earlier)?
https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPTroubleshootingTactics

shibd.log will tell you what it received and skipped or filtered out.
transaction.log will tell you what it successfully mapped.

If the SAML is *not* encrypted you can see everything in the browser,
e.g. easiest with Mozilla Firefox using the SAMLtracer extension.

If the SAML is encrypted you can raise the log level at the SP to see
all the decrypted data, e.g. by adding the line
  log4j.category.Shibboleth.SSO=DEBUG
to your shibd.logger and restaring the SP.

-peter