Shib IdP Proxying to another IdP help

[Cantor, Scott]

You just told it to change the Attribute *Name* it's sending you. That's not the NameFormat. They're not the same field in the XML. I didn't say to rename the Attribute. I have no idea if this IdP is even capable of handling this, and if it's not, then I've said what you need to do; you need to create new transcoder rules that will match by specifying the same Name but the unspecified NameFormat.

And as I keep saying, this has nothing to with the attribute resolver configuration. That is not how you fix the issue. Please read the material on the AttributeRegistry feature. That is the configuration that controls the rules for decoding things (and it doubles as the easiest way to encode them now as well).

If you have an Attribute like this:

        <Attribute Name="givenName">

Then you need to create a rule in the registry that matches

$ vi idp/conf/attributes/custom/givenName.properties

id = givenName
transcoder = SAML2StringTranscoder
saml2.name = givenName
saml2.nameFormat = urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified

That's what it takes to get it decoded.

-- Scott