eduPersonOrcid not mapped

[Annalena Reuss]

Hi all,

I have a test system in place, which is running fine with the  
exception of the eduPersonOrcid attribute (all other attributes are  
mapped correctly).
The SP seems to map the attribute successfully, but upon sign-in  
somehow skips the attribute.

I spent quite some time debugging but wasn't able to find the mistake.  
The logs don't show any errors besides the skipped attribute (3). I've  
also tried mapping the attribute with/without decoder, SAML2.0/SAML1.1  
format etc.
IdP side releases the attributes properly.

Below I attached the relevant code bits.

Happy about any hint!

Best,

Annalena


(1) attribute-map.xml:
<Attribute name="urn:oid:1.3.6.1.4.1.5923.1.1.1.16" id="eduPersonOrcid">
       <AttributeDecoder xsi:type="StringAttributeDecoder"  
caseSensitive="false"/>
</Attribute>


(2) attribute-policy.xml:
<AttributeRule attributeID="eduPersonOrcid" permitAny="true"></AttributeRule>


(3) shibd.log:
Shibboleth.AttributeExtractor.XML : creating mapping for Attribute  
urn:oid:1.3.6.1.4.1.5923.1.1.1.16
[...]
Shibboleth.AttributeExtractor.XML [4] [default]: skipping SAML 2.0  
Attribute with Name: 1.3.6.1.4.1.5923.1.1.1.16


--
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 6603 bytes
Desc: S/MIME Signature
URL: <http://shibboleth.net/pipermail/users/attachments/20230208/86023b5d/attachment.p7s>