Proxy IdP hybrid question local and remote IdPs
Mak, Steve
makst at upenn.edu
Wed Sep 9 14:17:21 UTC 2020
> order you define them until one works.
This helped!
> hybrid c14n
I ended up fixing my issue, but I can elaborate.
My DataConnector of type="Subject" was resulting in java null pointer exceptions (even after I reordered by subject-c14n.xml) when I was doing local IdP authN
Attribute-resolver.xml snippet:
<!-- Proxy Subject Data Connector -->
<DataConnector id="proxyAttributesPassthrough" xsi:type="Subject"
exportAttributes="eduPersonPrincipalName displayName givenName surname employeeNumber email eduPersonAffiliation eduPersonScopedAffiliation"/>
idp-process log:
2020-09-09 09:22:45,004 - ERROR [net.shibboleth.idp.saml.profile:-2] - Uncaught runtime exception
java.lang.NullPointerException: null
at net.shibboleth.idp.attribute.resolver.impl.AttributeResolverImpl.collectExportingDataConnectors(AttributeResolverImpl.java:542)
2020-09-09 09:22:45,006 - WARN [org.opensaml.profile.action.impl.LogEvent:101] - A non-proceed event occurred while processing the request: RuntimeException
My solution was to add forCanonicalization="true" to the DataConnector and that seems to be working well for both local IdP and remote IdP authN.
- Steve
More information about the users
mailing list