Retrieve NameID

[George Glessner]

Hi Peter, 

Thanks for all of your help, sorry I am very new to this! 

I added the following to my attribute-map: 

<Attribute name="urn:oasis:names:tc:SAML:2.0:attrname-format:basic" id="Email"/>
         <AttributeDecoder xsi:type="xsd:string"/>
    </Attribute>

Still am not seeing the attribute. I also tried: 

Attribute name="Email" nameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic" id="Email"/>
         <AttributeDecoder xsi:type="xsd:string"/>
    </Attribute>

To no avail. 


-----Original Message-----
From: users <users-bounces at shibboleth.net> On Behalf Of Peter Schober
Sent: Friday, June 29, 2018 11:43 AM
To: users at shibboleth.net
Subject: Re: Retrieve NameID

* George Glessner <gglessner at serviceexpress.com> [2018-06-29 17:22]:
> Looking at what is getting sent over I noticed: 
> 
> 	<saml:NameID Format="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified"
>                 NameQualifier="[Metadata URL]">gglessner</saml:NameID>

So the rules for persistent will never match.

 
> So I changed my attribute-map to account for unspecified but still 
> don't think I will be able to access it because of Classic ASP and 
> IIS. We tried placing an attribute of e-mail, but that attribute 
> doesn't show up on the Session page.
> 
> This is what is getting sent over for attribute: 
> 
> <saml:Attribute Name="Email" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
>                 <saml:AttributeValue xmlns:xsd="http://www.w3.org/2001/XMLSchema"
>                     xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xsd:string">gglessner at serviceexpress.com</saml:AttributeValue>
>             </saml:Attribute>
> 
> Is there anything I need to update to account for this new attribute? 

Yes. You already quoted the URL but it looks like you'll need to read it again (there's no shame to that, I frequently learn new things when looking at docs again, even stuff I've thouroughly read earlier):
https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPAddAttribute

>From the above the formal attribute name is "Email", so you'll have to have a rule for that specific name in your attribute-map.xml.
You may also have to add the "basic" nameFormat, docs are here:
https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPAttributeExtractor#NativeSPAttributeExtractor-ChildElements.1

-peter
--
For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net