OIDC extension - "Unable to produce a viable 'sub' claim" error

Cantor, Scott cantor.2 at osu.edu
Tue Feb 11 08:31:02 EST 2020

> Also, what is the right way to contribute now that development switched to
> Shibboleth project?
> I was unable to find any guide on how to contribute except Contribution Policy
> [2] but that does not say where to send patches.


The registry should be properly enabled out of the box. Long term, it's not going to work like it does now, it shouldn't be based on something like the name of an attribute being "sub". But for the moment, I don't think it's any different than before, and you can freely use an AttributeEncoder as before or add a rule to the registry, either should work (the encoder just turns into a rule internally). I don't know what it does or did out of the box.

The example in the wiki still looks usable to me. The exception would be if the name of the attribute resolver configuration isn't the default file, there's an edge case there.

-- Scott

More information about the users mailing list