duplicate uid in SAML Responce

Noriyuki TAKEI ntakei at sios.com
Mon Feb 28 14:35:58 UTC 2022


Hi, all.

I am facing an Issue.I tried to send uid attribute to SP.

However, I found the duplicate uid in the saml response as below.
--- start ---
<saml2:AttributeStatement>
    <saml2:Attribute FriendlyName="sn"
                     Name="urn:oid:2.5.4.4"

 NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"
                     >
        <saml2:AttributeValue>test001</saml2:AttributeValue>
    </saml2:Attribute>
    <saml2:Attribute FriendlyName="uid"
                     Name="urn:oid:0.9.2342.19200300.100.1.1"

 NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"
                     >
        <saml2:AttributeValue>test001</saml2:AttributeValue>
    </saml2:Attribute>
    <saml2:Attribute FriendlyName="uid"
                     Name="urn:oid:0.9.2342.19200300.100.1.1"

 NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"
                     >
        <saml2:AttributeValue>test001</saml2:AttributeValue>
    </saml2:Attribute>
</saml2:AttributeStatement>
--- end ---

I defined attirbute-resolver.xml as below.
--- start ---
<AttributeDefinition xsi:type="Simple" id="uid">

    <InputDataConnector ref="myLDAP" attributeNames="uid"/>

    <AttributeEncoder xsi:type="SAML1String"
name="urn:mace:dir:attribute-def:uid" encodeType="false" />

    <AttributeEncoder xsi:type="SAML2String"
name="urn:oid:0.9.2342.19200300.100.1.1" friendlyName="uid"
encodeType="false" />
</AttributeDefinition>
--- end ---

I defined attirbute-filter.xml as below.
--- end ---
<AttributeFilterPolicy id="testsp">

    <PolicyRequirementRule xsi:type="Requester" value="
https://sp.example.org/shibboleth" />
    <AttributeRule attributeID="uid" permitAny="true" />
    <AttributeRule attributeID="surname" permitAny="true" />
</AttributeFilterPolicy>
</AttributeFilterPolicyGroup>
--- end ---

Please tell me the solution to solve this issue.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20220228/8cc89313/attachment.htm>


More information about the users mailing list