your mail

[Peter Schober]

* Ilya Rumyantsev <iliggio at gmx.de> [2018-10-08 14:52]:
> Hi Peter, thanks. I indeed have the eduPersonTargetedId defined:
> 
> <AttributeDefinition
>      id="eduPersonTargetedID"
>      xsi:type="Simple"
>      sourceAttributeID="computedID">
>    <Dependency ref="computedIDDC" />
> 	
>         <AttributeEncoder
> 	    xsi:type="SAML1XMLObject"
>             name="urn:oid:1.3.6.1.4.1.5923.1.1.1.10" />
> 	
>         <AttributeEncoder xsi:type="SAML2XMLObject" 
> 			  name="urn:oid:1.3.6.1.4.1.5923.1.1.1.10" friendlyName="eduPersonTargetedID" />
>  </AttributeDefinition>

"Simple" is the wrong type, it should be "SAML2NameID".
The nameIdFormat XML-attribute would also be needed, then.

You don't show the referenced data connector, so that's all I can say.

> According to logs it might be because of the encoding then:
> 
> Profile Action AddAttributeStatementToAssertion: Attribute
> eduPersonTargetedID did not have a usable SAML 2 Attribute encoder
> associated with it, nothing to do

Well, there you have it.

> It is right according to this dfn wiki:
> 
>     https://wiki.aai.dfn.de/de:shibidp3attributes-targetedid

Your AttributeDefinition above is nothing like that from the DFN-AAI
documentation, so I don't understand the question.

-peter