Shib 4.0.1, repeated attributes in SAML assertions

Jeffrey Williams jfwillia at uncg.edu
Mon Feb 22 18:44:47 UTC 2021


That was indeed it.  Thanks, Chris!



On Fri, Feb 19, 2021 at 6:07 PM Christopher Bongaarts via users <
users at shibboleth.net> wrote:

> On 2/19/2021 3:57 PM, Jeffrey Williams via users wrote:
> > An issue has cropped up in our dev environment where certain
> > attributes are being asserted twice in outgoing SAML assertions.  The
> > debug logs seem to indicate that the attributes in question are
> > resolving with the expected values and go through deduplication as one
> > would expect.
> >
> > However, the outgoing SAML assertion is logged and sent with certain
> > attributes having duplicate entries.  It seems to be the same
> > attributes each time.
>
> Usual cause of this would be the new Attribute Registry feature in 4.0
> and the old AttributeEncoder in attribute-resolver.xml causing the
> multiple encodings.  Check the General Configuration section on:
>
>
> https://wiki.shibboleth.net/confluence/display/IDP4/AttributeRegistryConfiguration
>
> to see where to start looking...
>
> --
> %%  Christopher A. Bongaarts   %%  cab at umn.edu          %%
> %%  OIT - Identity Management  %%  http://umn.edu/~cab  %%
> %%  University of Minnesota    %%  +1 (612) 625-1809    %%
>
> --
> For Consortium Member technical support, see
> https://wiki.shibboleth.net/confluence/x/coFAAg
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>


-- 
Jeffrey Williams
Identity & Access Engineer
Identity & Access Services
https://its.uncg.edu
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20210222/f843c94c/attachment.htm>


More information about the users mailing list