Shibboleth/apache/O365 Azure/Reverse Proxy
ptedesco
ptedesco at ims.consulting
Tue May 12 23:57:13 UTC 2020
Ok, I think I am more confused now.
If anyone can tell me what I need to change it would be greatly appreciated
my Attribute map is
<Attributes xmlns="urn:mace:shibboleth:2.0:attribute-map"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<Attribute name="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent"
id="persistent-id">
<AttributeDecoder xsi:type="NameIDAttributeDecoder"
formatter="$NameQualifier!$SPNameQualifier!$Name" defaultQualifiers="true"/>
</Attribute>
<Attribute name="emailAddress"
nameFormat="urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress"
id="emailAddress">
<AttributeDecoder xsi:type="NameIDAttributeDecoder"
formatter="$Name" defaultQualifiers="true" />
</Attribute>
<Attribute name="mail"
nameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified"
id="mail">
<AttributeDecoder xsi:type="NameIDAttributeDecoder"
formatter="$Name" defaultQualifiers="true" />
</Attribute>
<Attribute name="urn:mace:dir:attribute-def:mail" id="SHIB_MAIL"/>
<Attribute name="urn:oid:0.9.2342.19200300.100.1.3" id="SHIB_MAIL"/>
<Attribute name="urn:oid:0.9.2342.19200300.100.1.1" id="uid"/>
<Attribute name="urn:mace:dir:attribute-def:uid" id="uid"/>
<Attribute name="urn:oid:0.9.2342.19200300.100.1.3" id="mail"/>
<Attribute name="urn:mace:dir:attribute-def:mail" id="mail"/>
<Attribute name="urn:mace:dir:attribute-def:samaccountname"
id="samaccountname" />
<Attribute name="urn:oid:1.2.840.113556.1.4.221" id="samaccountname" />
</Attributes>
and my Attribute-policy file is
<AttributeFilterPolicyGroup
xmlns="urn:mace:shibboleth:2.0:afp"
xmlns:saml="urn:mace:shibboleth:2.0:afp:mf:saml"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<AttributeFilterPolicy>
<PolicyRequirementRule xsi:type="ANY"/>
<AttributeRule attributeID="*" permitAny="true"/>
</AttributeFilterPolicy>
</AttributeFilterPolicyGroup>
--
Sent from: https://shibboleth.1660669.n2.nabble.com/Shibboleth-Users-f1660767.html
More information about the users
mailing list