Force a fixe value for a Mapped AttributeDefinition (DocuSign AccountID)

[Jehan PROCACCIA]

Scott, I did restarted completetly the IDP , but after a deeper look at my static Attribute Definition there was a major missing element:  <InputDataConnector ref="staticAttributes" attributeNames="staticDSAccountID" /> in <AttributeDefinition xsi:type="Simple" id="staticDSAccountID"> ! 
so for the record here is the fully operationnal staticAttribute DeEfinition + it's associated DataConnector : 


<AttributeDefinition xsi:type="Simple" id="staticDSAccountID">
        <InputDataConnector ref="staticAttributes" attributeNames="staticDSAccountID" />
         <AttributeEncoder xsi:type="SAML2String"
                name="urn:oid:1.3.6.1.4.1.7391.5.1.1.1" friendlyName="staticDSAccountID" />
</AttributeDefinition>


   <DataConnector id="staticAttributes" xsi:type="Static">
                <Attribute id="staticDSAccountID">
                        <Value>6bf9cfa7-d539-45d1-8a4c-2f9b17574a12</Value>
                </Attribute>
        </DataConnector>
        </AttributeResolver>

Now the attribute is correctly sent to DocuSign SP (as reproduce from IDP debug log below [1] ) , unfortunatly that does'nt promote 1srt time connexion users to the DS-Sender permission profile on the SP part, but that's an other issue I am facing with le DocuSign Support . 

Thanks for your help . 


2021-01-29 08:56:39,568 -  - DEBUG [net.shibboleth.idp.attribute.resolver.spring.dc.impl.StaticDataConnectorParser:85] - Data Connector 'staticAttributes': Adding Attribute: staticDSAccountID with 1 values
2021-01-29 08:57:01,191 - 157.159.52.135 - DEBUG [net.shibboleth.idp.attribute.resolver.AbstractDataConnector:199] - Data Connector 'staticAttributes': Attribute 'staticDSAccountID': Values '[StringAttributeValue{value=ai4dc9cfa7-dd39-aad1-884c-2f9b17574224}]'
2021-01-29 08:57:01,192 - 157.159.52.135 - DEBUG [net.shibboleth.idp.attribute.resolver.AbstractAttributeDefinition:139] - Attribute Definition 'staticDSAccountID': produced an attribute with the following values [StringAttributeValue{value=ai4dc9cfa7-dd39-aad1-884c-2f9b17574224}]
2021-01-29 08:57:01,200 - 157.159.52.135 - DEBUG [net.shibboleth.idp.attribute.resolver.impl.AttributeResolverImpl:519] - Attribute Resolver 'ShibbolethAttributeResolver': Attribute 'staticDSAccountID' has 1 values after post-processing
2021-01-29 08:57:01,209 - 157.159.52.135 - DEBUG [net.shibboleth.idp.attribute.resolver.impl.AttributeResolverImpl:259] - Attribute Resolver 'ShibbolethAttributeResolver': Final resolved attribute collection: [mail, givenName, staticDSAccountID, eduPersonPrincipalName, sn, employeeType]
2021-01-29 08:57:01,223 - 157.159.52.135 - DEBUG [net.shibboleth.idp.attribute.filter.AttributeFilterPolicy:153] - Attribute Filter Policy 'Per-Attribute-singleValued'  Applying attribute filter policy to current set of attributes: [mail, givenName, staticDSAccountID, eduPersonPrincipalName, sn, employeeType]
2021-01-29 08:57:01,232 - 157.159.52.135 - DEBUG [net.shibboleth.idp.attribute.filter.AttributeRule:183] - Attribute filtering engine '/AttributeFilterPolicyGroup:ShibbolethFilterPolicy/AttributeRule:_10b47b8960313dba84b154f511ae3c29'  Filtering values for attribute 'staticDSAccountID' which currently contains 1 values
2021-01-29 08:57:01,232 - 157.159.52.135 - DEBUG [net.shibboleth.idp.attribute.filter.AttributeRule:192] - Attribute filtering engine '/AttributeFilterPolicyGroup:ShibbolethFilterPolicy/AttributeRule:_10b47b8960313dba84b154f511ae3c29'  Filter has permitted the release of 1 values for attribute 'staticDSAccountID'
2021-01-29 08:57:01,233 - 157.159.52.135 - DEBUG [net.shibboleth.idp.attribute.filter.impl.AttributeFilterImpl:178] - Attribute filtering engine 'ShibbolethAttributeFilter': 1 values for attribute 'staticDSAccountID' remained after filtering
2021-01-29 08:57:01,404 - 157.159.52.135 - DEBUG [net.shibboleth.idp.consent.flow.impl.PopulateConsentContext:64] - Profile Action PopulateConsentContext: Populating consents: [employeeType, givenName, mail, sn, staticDSAccountID]



----- Mail original -----
De: "Cantor, Scott" <cantor.2 at osu.edu>
À: "users" <users at shibboleth.net>
Envoyé: Vendredi 29 Janvier 2021 00:12:49
Objet: Re: Force a fixe value for a Mapped  AttributeDefinition (DocuSign AccountID)

On 1/28/21, 5:16 PM, "users on behalf of Jehan PROCACCIA" <users-bounces at shibboleth.net on behalf of jehan.procaccia at tem-tsp.eu> wrote:

>    did I missed something else ?

Not if you restarted. If not, you probably failed to reload the transcoding service.

-- Scott


-- 
For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net