duplicate uid in SAML Responce
Noriyuki TAKEI
ntakei at sios.com
Mon Feb 28 14:35:58 UTC 2022
Hi, all.
I am facing an Issue.I tried to send uid attribute to SP.
However, I found the duplicate uid in the saml response as below.
--- start ---
<saml2:AttributeStatement>
<saml2:Attribute FriendlyName="sn"
Name="urn:oid:2.5.4.4"
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"
>
<saml2:AttributeValue>test001</saml2:AttributeValue>
</saml2:Attribute>
<saml2:Attribute FriendlyName="uid"
Name="urn:oid:0.9.2342.19200300.100.1.1"
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"
>
<saml2:AttributeValue>test001</saml2:AttributeValue>
</saml2:Attribute>
<saml2:Attribute FriendlyName="uid"
Name="urn:oid:0.9.2342.19200300.100.1.1"
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"
>
<saml2:AttributeValue>test001</saml2:AttributeValue>
</saml2:Attribute>
</saml2:AttributeStatement>
--- end ---
I defined attirbute-resolver.xml as below.
--- start ---
<AttributeDefinition xsi:type="Simple" id="uid">
<InputDataConnector ref="myLDAP" attributeNames="uid"/>
<AttributeEncoder xsi:type="SAML1String"
name="urn:mace:dir:attribute-def:uid" encodeType="false" />
<AttributeEncoder xsi:type="SAML2String"
name="urn:oid:0.9.2342.19200300.100.1.1" friendlyName="uid"
encodeType="false" />
</AttributeDefinition>
--- end ---
I defined attirbute-filter.xml as below.
--- end ---
<AttributeFilterPolicy id="testsp">
<PolicyRequirementRule xsi:type="Requester" value="
https://sp.example.org/shibboleth" />
<AttributeRule attributeID="uid" permitAny="true" />
<AttributeRule attributeID="surname" permitAny="true" />
</AttributeFilterPolicy>
</AttributeFilterPolicyGroup>
--- end ---
Please tell me the solution to solve this issue.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20220228/8cc89313/attachment.htm>
More information about the users
mailing list