SubjectDerivedAttributeDefinition Generated no values

Cantor, Scott cantor.2 at osu.edu
Tue Oct 13 16:14:08 UTC 2020


On 10/13/20, 12:08 PM, "Cantor, Scott" <cantor.2 at osu.edu> wrote:

>    Yes. You can't define a SubjectDerivedAttributeDefinition based on an attrbute definition resolved during normal
> attribute processing, that hasn't happened yet.

Actually I take it back. If you copied the example of using SubjectDerivedAttribute, then that should work fine, so you can't have uid mapped, it's really nothing more than that. Doesn't matter what it looks like, it's not there or it would have found it.

It's equivalent to using the DataConnector, and it won't make any difference here, uid just isn't there. You'd have to crank up the logging and see what it's putting in the Subject when it processes the SAML response or get very close up with all the transcoding rules it's applying to see why it's not mapping uid in.

-- Scott




More information about the users mailing list