Retrieve NameID

[Peter Schober]

* George Glessner <gglessner at serviceexpress.com> [2018-06-29 17:22]:
> Looking at what is getting sent over I noticed: 
> 
> 	<saml:NameID Format="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified"
>                 NameQualifier="[Metadata URL]">gglessner</saml:NameID>

So the rules for persistent will never match.

 
> So I changed my attribute-map to account for unspecified but still
> don't think I will be able to access it because of Classic ASP and
> IIS. We tried placing an attribute of e-mail, but that attribute
> doesn't show up on the Session page.
> 
> This is what is getting sent over for attribute: 
> 
> <saml:Attribute Name="Email" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
>                 <saml:AttributeValue xmlns:xsd="http://www.w3.org/2001/XMLSchema"
>                     xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xsd:string">gglessner at serviceexpress.com</saml:AttributeValue>
>             </saml:Attribute>
> 
> Is there anything I need to update to account for this new attribute? 

Yes. You already quoted the URL but it looks like you'll need to read
it again (there's no shame to that, I frequently learn new things when
looking at docs again, even stuff I've thouroughly read earlier):
https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPAddAttribute

>From the above the formal attribute name is "Email", so you'll have to
have a rule for that specific name in your attribute-map.xml.
You may also have to add the "basic" nameFormat, docs are here:
https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPAttributeExtractor#NativeSPAttributeExtractor-ChildElements.1

-peter