Retrieve NameID

[George Glessner]

Peter, 

Looking at shibd I notice: 

2018-06-29 11:56:28 INFO Shibboleth.AttributeExtractor.XML [68]: skipping unmapped SAML 2.0 Attribute with Name: Email, Format:urn:oasis:names:tc:SAML:2.0:attrname-format:basic

It is strange because it is being sent over as SAML 2 but in the metadata provided by IDP there is this: 

urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress

which I do not know if that correlates to this e-mail attribute or not but I tried replacing the nameformat with the above and still could not get it to show up. I saw this post https://serverfault.com/questions/790521/skipping-unmapped-saml-2-0-attribute-even-though-name-and-nameformat-matchf which states that Shibboleth can't mix SAML 1 and 2 so I am not sure if that is my issue or not. 

-----Original Message-----
From: users <users-bounces at shibboleth.net> On Behalf Of Peter Schober
Sent: Friday, June 29, 2018 11:53 AM
To: users at shibboleth.net
Subject: Re: Retrieve NameID

* George Glessner <gglessner at serviceexpress.com> [2018-06-29 17:48]:
> I added the following to my attribute-map: 
> 
> <Attribute name="urn:oasis:names:tc:SAML:2.0:attrname-format:basic" id="Email"/>
>          <AttributeDecoder xsi:type="xsd:string"/>
>     </Attribute>
> 
> Still am not seeing the attribute. I also tried: 
> 
> Attribute name="Email" nameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic" id="Email"/>
>          <AttributeDecoder xsi:type="xsd:string"/>
>     </Attribute>
> 
> To no avail. 

Order of XML attributes don't matter, so the above are equivalent.
Also you can drop the Decoder, see the example in the docs called "Example of a Simple String-valued Attribute with nameFormat".

Either should work and be equivalient to:
<Attribute name="Email" id="mail" nameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"/>

so if you're saying you're "not seeing the attribute" we're probably back to you not looking properly.

1. What does shibd.log say when recieving the attribute?
2. What does transaction.log day when reciecing the attribute?

Forget ASP, passing data on to downstream components is something to look at once you're sure the SP software has processed the data correctly.

-peter
--
For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net