Attribute Transcoding errors following IdP upgrade

Simon McLeish simon.mcleish at gmail.com
Tue Sep 22 14:19:22 UTC 2020


OK, so the problem would be the rules for those attributes in
attribute-resolver.xml, which are:

    <AttributeDefinition id="mail" xsi:type="Simple" >
        <InputDataConnector ref="myLDAP" attributeNames="mail"/>
        <AttributeEncoder xsi:type="SAML1String"
name="urn:mace:dir:attribute-def:mail" encodeType="false" />
        <AttributeEncoder xsi:type="SAML2String"
name="urn:oid:0.9.2342.19200300.100.1.3" friendlyName="mail"
encodeType="false" />
    </AttributeDefinition>

    <AttributeDefinition id="bodlAlephID" xsi:type="Simple">
        <InputDataConnector ref="myLDAP" attributeNames="employeeNumber" />
        <AttributeEncoder xsi:type="SAML1String"
name="urn:mace:dir:attribute-def:employeeNumber" encodeType="false" />
        <AttributeEncoder xsi:type="SAML2String"
name="urn:oid:2.16.840.1.113730.3.1.3" friendlyName="employeeNumber"
encodeType="false" />
    </AttributeDefinition>

Wouldn't those rules be expected to work the same in 3.4.6 and 4.0.1?

Cheers,
Simon

On Tue, Sep 22, 2020 at 3:09 PM Rod Widdowson <rdw at steadingsoftware.com>
wrote:

> > It was an upgrade in place.
>
> In that case - modulo any editing - the inetOrgPerson.xml File is not
> relevant and it should be consulting the AttributeEncoders on your
> attribute definition....
>
>
>
> --
> For Consortium Member technical support, see
> https://wiki.shibboleth.net/confluence/x/coFAAg
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20200922/bad68053/attachment.htm>


More information about the users mailing list