Dealing with EmptyAttributeValues when encoding SAML2Strings

Max Spicer max.spicer at york.ac.uk
Wed Apr 7 13:07:16 UTC 2021


With Idp 4.0.1, we now get quite a few occurrences of this warning:

net.shibboleth.idp.saml.attribute.transcoding.AbstractSAMLAttributeTranscoder
- "Skipping value of attribute 'xxxx'; Type EmptyAttributeValue cannot be
encoded by this encoder (SAML2StringAttributeTranscoder)."

The attribute definition is:
    <AttributeDefinition id="xxxx" xsi:type="Simple">
        <InputAttributeDefinition ref="yyyy" />
        <AttributeEncoder xsi:type="SAML2String"
name="urn:oid:1.2.840.113556.1.4.35" friendlyName="zzzz" />
    </AttributeDefinition>

And the input data connector is of type RelationalDatabase.

The data connector returns nulls for some values so this is just a warning,
but I'm wondering how I can remove it as it does clutter the logs. Can we
filter the null values from being encoded somehow?

Thanks,

Max Spicer
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20210407/8c80998c/attachment.htm>


More information about the users mailing list