No subject
Ilya Rumyantsev
iliggio at gmx.de
Mon Oct 8 07:30:52 EDT 2018
Hi all, from a service provider I am getting the following error message:
SimpleSAML_Error_Exception: This service needs at least one of the following
attributes to identity users: eduPersonTargetedID, facebook_targetedID, google_eppn, linkedin_targetedID, twitter_targetedID. Unfortunately not
one of them was detected. Please ask your institution administrator to release one of
them, or try using another identity provider.
I have the following settings in saml-nameid.properties
idp.nameid.saml2.default = urn:oasis:names:tc:SAML:2.0:nameid-format:persistent
idp.nameid.saml1.default = urn:mace:shibboleth:1.0:nameIdentifier
idp.transientId.generator = shibboleth.CryptoTransientIdGenerator
idp.persistentId.sourceAttribute = eduPersonTargetedID
the `shibboleth.SAML2PersistentGenerator` bean is uncommented in saml-nameid.xml and the attribute filter is set to release this attribute.
If I look into my assertion, I see
<saml2:NameID
Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient"
Which I don't understand as I have set it to persistent as default value.
What am I missing?
Thanks a lot
More information about the users
mailing list