Attribute not in HTTP header

[Peter Schober]

* Mathew, Sunil <smathew at hbs.edu> [2019-01-30 09:58]:
> <saml2:Attribute FriendlyName="SHIB_USER_IDENTIFIER"
>   Name="SHIB_USER_IDENTIFIER" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
>     <saml2:AttributeValue xmlns:xsd="http://www.w3.org/2001/XMLSchema"
>       xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xsd:string">12345
>     </saml2:AttributeValue>
> </saml2:Attribute>

Also note that your attribute NameFormats are off: You're saying above
that the format of the (value of the) Name attribute is a URI but
clearly "SHIB_USER_IDENTIFIER" is not a URI.

So either use actual URIs as attribute names (best to use standard
identifiers, not ad-hoc made-up ones such as "SHIB_USER_IDENTIFIER")
https://wiki.shibboleth.net/confluence/display/SHIB2/AttributeNaming
or set the correct NameFormat (basic, in this case).

> <saml2:Attribute FriendlyName="SHIB_ACS_INDEX" Name="SHIB_ACS_INDEX"
>   NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
>     <saml2:AttributeValue xmlns:xsd="http://www.w3.org/2001/XMLSchema"
>       xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xsd:string">1
>     </saml2:AttributeValue>
> </saml2:Attribute>

Any why do you think the SP needs this (its own ACS Index value; never) sent as
a SAML attribute?

-peter