Attribute Transcoding errors following IdP upgrade
Simon McLeish
simon.mcleish at gmail.com
Tue Sep 22 14:19:22 UTC 2020
OK, so the problem would be the rules for those attributes in
attribute-resolver.xml, which are:
<AttributeDefinition id="mail" xsi:type="Simple" >
<InputDataConnector ref="myLDAP" attributeNames="mail"/>
<AttributeEncoder xsi:type="SAML1String"
name="urn:mace:dir:attribute-def:mail" encodeType="false" />
<AttributeEncoder xsi:type="SAML2String"
name="urn:oid:0.9.2342.19200300.100.1.3" friendlyName="mail"
encodeType="false" />
</AttributeDefinition>
<AttributeDefinition id="bodlAlephID" xsi:type="Simple">
<InputDataConnector ref="myLDAP" attributeNames="employeeNumber" />
<AttributeEncoder xsi:type="SAML1String"
name="urn:mace:dir:attribute-def:employeeNumber" encodeType="false" />
<AttributeEncoder xsi:type="SAML2String"
name="urn:oid:2.16.840.1.113730.3.1.3" friendlyName="employeeNumber"
encodeType="false" />
</AttributeDefinition>
Wouldn't those rules be expected to work the same in 3.4.6 and 4.0.1?
Cheers,
Simon
On Tue, Sep 22, 2020 at 3:09 PM Rod Widdowson <rdw at steadingsoftware.com>
wrote:
> > It was an upgrade in place.
>
> In that case - modulo any editing - the inetOrgPerson.xml File is not
> relevant and it should be consulting the AttributeEncoders on your
> attribute definition....
>
>
>
> --
> For Consortium Member technical support, see
> https://wiki.shibboleth.net/confluence/x/coFAAg
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20200922/bad68053/attachment.htm>
More information about the users
mailing list