Aw: Re: Persistent ID encoding error: did not have a usable SAML 2 Attribute encoder

[Ilya Rumyantsev]

Hi Scott, sorry, probably I had a misconception of the name ID. Looking at my assertion with the NameID encoder I only see the 

<saml2:NameID Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient"

which is apparently the transient ID. According to the log there should also be the persistentID, but I cannot find it anywhere in my assertion.
Could you please tell me, where to look?


Profile Action ReleaseAttributes: Releasing attributes '{eduPersonEntitlement=IdPAttribute{id=eduPersonEntitlement, displayNames={de=Berechti
gung, en=Entitlement}, displayDescriptions={de=Zeichenkette, die Rechte für spezifischen Ressourcen beschreibt, en=URI that indicates a set of rights to specific resources}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML2S
tringAttributeEncoder at 23a4f2, net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder at d583e95], values=[StringAttributeValue{value=urn:mace:dir:entitlement:common-lib-terms}]}, persistentId=IdPAttribute{id=persistentId
, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringNameIdentifierEncoder at 467a003e, net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringNameIDEncoder at 4819f4d], values=[Str
ingAttributeValue{value=UL2j1GK17+iqYoMEAT2UJHNu8Fg=}]}, transientId=IdPAttribute{id=transientId, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringNameIdentifierEncoder at 2c108d1,
 net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringNameIDEncoder at 62bfd1d6], values=[StringAttributeValue{value=_0f2ba3bef628759bc092e2fb63978f7a}]}, eduPersonScopedAffiliation=IdPAttribute{id=eduPersonScopedAffiliation, displayNa
mes={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML2ScopedStringAttributeEncoder at 23ac74, net.shibboleth.idp.saml.attribute.encoding.impl.SAML1ScopedStringAttributeEncoder at bab64ea8], values=[Scope
dStringAttributeValue{value=employee, scope=fraunhofer.de}]}, eduPersonTargetedID=IdPAttribute{id=eduPersonTargetedID, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML2XMLObjectAttrib
uteEncoder at aba7b700, net.shibboleth.idp.saml.attribute.encoding.impl.SAML1XMLObjectAttributeEncoder at 471bbf67], values=[StringAttributeValue{value=UL2j1GK17+iqYoMEAT2UJHNu8Fg=}]}, displayName=IdPAttribute{id=displayName, displayNames={}, d
isplayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder at fd638e24, net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder at 27f9d24], values=[StringAttributeValue{valu
e=Rumyantsev, Ilya}]}, givenName=IdPAttribute{id=givenName, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder at 552e411f, net.shibboleth.idp.saml.attribute.encodin
g.impl.SAML2StringAttributeEncoder at 27f9d24], values=[StringAttributeValue{value=Ilya}]}, eduPersonPrincipalName=IdPAttribute{id=eduPersonPrincipalName, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.e
ncoding.impl.SAML2ScopedStringAttributeEncoder at 23a131, net.shibboleth.idp.saml.attribute.encoding.impl.SAML1ScopedStringAttributeEncoder at bab64ea8], values=[ScopedStringAttributeValue{value=ily96114, scope=fraunhofer.de}]}, sn=IdPAttribute
{id=sn, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder at 35663cae, net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder at d164538a], values
=[StringAttributeValue{value=Rumyantsev}]}, email=IdPAttribute{id=email, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder at 7af7b1d5, net.shibboleth.idp.saml.attr
ibute.encoding.impl.SAML1StringAttributeEncoder at 61ffc98a], values=[StringAttributeValue{value=me at me.de}]}, organizationalUnit=IdPAttribute{id=organizationalUnit, displayNames={}, displayDescriptions={}, enco
ders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder at 27e3c46, net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder at 35648579], values=[StringAttributeValue{value=XX}]}}'


Bitte beachten Sie, dass meine neue E-mail Adresse
ilya at rumyantsev.de
lautet. Schicken Sie alle weiteren Mails künftig bitte dort hin.


> Gesendet: Montag, 01. Oktober 2018 um 15:58 Uhr
> Von: "Cantor, Scott" <cantor.2 at osu.edu>
> An: "Shib Users" <users at shibboleth.net>
> Betreff: Re: Persistent ID encoding error: did not have a usable SAML 2 Attribute encoder
>
> On 10/1/18, 9:45 AM, "users on behalf of Ilya Rumyantsev" <users-bounces at shibboleth.net on behalf of iliggio at gmx.de> wrote:
> 
> > How would I get it into an attribute?
> 
> I doubt very much that's what you want, but if you want one, then attach a regular AttributeEncoder of an appropriate type instead of a NameID encoder.
> 
> -- Scott
> 
> 
> -- 
> For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
>