I want to pass attribute value to SP.

[David Huebner]

Hi Tomomi,

On 8/16/19 5:01 AM, Tomomi wrote:
> Hi Rod,
> Thank you for your response.
>
>> And what do the logs say about what is put on the wire?  That will >give
> you a better steer.
>
> Sorry, I don't know where to look in the log.

First you should set logging levels to DEBUG, by putting (assuming it's 
version 3.4.4) something like this in 
/opt/shibboleth-idp/conf/idp.properties:

idp.loglevel.idp = DEBUG
idp.loglevel.messages = DEBUG
idp.loglevel.encryption = DEBUG

After restarting / reloading check the logs in 
/opt/shibboleth-idp/logs/idp-process.logs.

You should see a log entry with the unencrypted XML document, that is 
sent to your SP (which is meant by "on the wire").

Cheers,
David

>   What is the wire?
>
>> Is this SAML2? You don't specify?
> I think is it SAML2.
> where do I specify.
>
>> Is it the same for all relying parties?
> I have not changed relying-party.xml from the default value.
> Can I give relying party setting for each SP.
>
> Regards,
> Tomomi
>
>
>
> --
> Sent from: https://shibboleth.1660669.n2.nabble.com/Shibboleth-Users-f1660767.html