No subject

Ilya Rumyantsev iliggio at gmx.de
Mon Oct 8 07:30:52 EDT 2018


Hi all, from a service provider I am getting the following error message:

    SimpleSAML_Error_Exception: This service needs at least one of the following
		attributes to identity users: eduPersonTargetedID, facebook_targetedID, google_eppn, linkedin_targetedID, twitter_targetedID. Unfortunately not
		one of them was detected. Please ask your institution administrator to release one of
		them, or try using another identity provider.

I have the following settings in saml-nameid.properties

     idp.nameid.saml2.default = urn:oasis:names:tc:SAML:2.0:nameid-format:persistent
     idp.nameid.saml1.default = urn:mace:shibboleth:1.0:nameIdentifier
     idp.transientId.generator = shibboleth.CryptoTransientIdGenerator
     idp.persistentId.sourceAttribute = eduPersonTargetedID


the `shibboleth.SAML2PersistentGenerator` bean is uncommented in saml-nameid.xml and the attribute filter is set to release this attribute.

If I look into my assertion, I see 

    <saml2:NameID
       Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient"

Which I don't understand as I have set it to persistent as default value.

What am I missing?
Thanks a lot


More information about the users mailing list