Aw: Re: your mail

[Ilya Rumyantsev]

Hi Peter, thank you very much, this was my mistake. I have apparently overseen the type definition, thank you very much for pointing out. It works now.

Kind regards,
Ilya

> Gesendet: Montag, 08. Oktober 2018 um 14:59 Uhr
> Von: "Peter Schober" <peter.schober at univie.ac.at>
> An: users at shibboleth.net
> Betreff: Re: your mail
>
> * Ilya Rumyantsev <iliggio at gmx.de> [2018-10-08 14:52]:
> > Hi Peter, thanks. I indeed have the eduPersonTargetedId defined:
> > 
> > <AttributeDefinition
> >      id="eduPersonTargetedID"
> >      xsi:type="Simple"
> >      sourceAttributeID="computedID">
> >    <Dependency ref="computedIDDC" />
> > 	
> >         <AttributeEncoder
> > 	    xsi:type="SAML1XMLObject"
> >             name="urn:oid:1.3.6.1.4.1.5923.1.1.1.10" />
> > 	
> >         <AttributeEncoder xsi:type="SAML2XMLObject" 
> > 			  name="urn:oid:1.3.6.1.4.1.5923.1.1.1.10" friendlyName="eduPersonTargetedID" />
> >  </AttributeDefinition>
> 
> "Simple" is the wrong type, it should be "SAML2NameID".
> The nameIdFormat XML-attribute would also be needed, then.
> 
> You don't show the referenced data connector, so that's all I can say.
> 
> > According to logs it might be because of the encoding then:
> > 
> > Profile Action AddAttributeStatementToAssertion: Attribute
> > eduPersonTargetedID did not have a usable SAML 2 Attribute encoder
> > associated with it, nothing to do
> 
> Well, there you have it.
> 
> > It is right according to this dfn wiki:
> > 
> >     https://wiki.aai.dfn.de/de:shibidp3attributes-targetedid
> 
> Your AttributeDefinition above is nothing like that from the DFN-AAI
> documentation, so I don't understand the question.
> 
> -peter
> -- 
> For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
>