Proxy IdP hybrid question local and remote IdPs

Mak, Steve makst at upenn.edu
Wed Sep 9 14:17:21 UTC 2020


> order you define them until one works.

This helped!

> hybrid c14n

I ended up fixing my issue, but I can elaborate.

My DataConnector of type="Subject" was resulting in java null pointer exceptions (even after I reordered by subject-c14n.xml) when I was doing local IdP authN

Attribute-resolver.xml snippet:
    <!-- Proxy Subject Data Connector -->
    <DataConnector id="proxyAttributesPassthrough" xsi:type="Subject"
        exportAttributes="eduPersonPrincipalName displayName givenName surname employeeNumber email eduPersonAffiliation eduPersonScopedAffiliation"/>

idp-process log:

2020-09-09 09:22:45,004 - ERROR [net.shibboleth.idp.saml.profile:-2] - Uncaught runtime exception
java.lang.NullPointerException: null
	at net.shibboleth.idp.attribute.resolver.impl.AttributeResolverImpl.collectExportingDataConnectors(AttributeResolverImpl.java:542)
2020-09-09 09:22:45,006 - WARN [org.opensaml.profile.action.impl.LogEvent:101] - A non-proceed event occurred while processing the request: RuntimeException


My solution was to add forCanonicalization="true" to the DataConnector and that seems to be working well for both local IdP and remote IdP authN.

- Steve



More information about the users mailing list