Retrieve NameID

[George Glessner]

Looking at what is getting sent over I noticed: 

	<saml:NameID Format="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified"
                NameQualifier="[Metadata URL]">gglessner</saml:NameID>


So I changed my attribute-map to account for unspecified but still don't think I will be able to access it because of Classic ASP and IIS. We tried placing an attribute of e-mail, but that attribute doesn't show up on the Session page. 

This is what is getting sent over for attribute: 

<saml:Attribute Name="Email" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
                <saml:AttributeValue xmlns:xsd="http://www.w3.org/2001/XMLSchema"
                    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xsd:string">gglessner at serviceexpress.com</saml:AttributeValue>
            </saml:Attribute>

Is there anything I need to update to account for this new attribute? 



-----Original Message-----
From: users <users-bounces at shibboleth.net> On Behalf Of Peter Schober
Sent: Friday, June 29, 2018 10:25 AM
To: users at shibboleth.net
Subject: Re: Retrieve NameID

* George Glessner <gglessner at serviceexpress.com> [2018-06-29 16:18]:
> In my attribute-map.xml there is
> 
>     <Attribute name="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent" id="persistent-id">
>         <AttributeDecoder xsi:type="NameIDAttributeDecoder" formatter="$NameQualifier!$SPNameQualifier!$Name" defaultQualifiers="true"/>
>     </Attribute>
> 
> Does this not build a HTTP header?

No. Not unless you force the software to do so:
By default attributes are exposed as environment variables, not as HTTP Request Headers, at least on Apache httpd.
The documentation explains why. (TL;DR: Because security.)

> Request.servervariables("HTTP_persistent-id")

What kind of API is that?

Also check whether underscores and dashes are not molested/normalized on the conversion to HTTP Request Headers in some way, so the name may not be exactly that.

As Scott already told you in another thread recently:

* Cantor, Scott <cantor.2 at osu.edu> [2018-06-28 22:06]:
> On IIS the safeHeaderNames option will collapse the punctuation in the 
> header names, the wiki discusses that. Don't know that that's your 
> issue, but it's possible.
> 
> Dump your headers with a loop and you'll know what's there or not.

-peter
--
For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net