eduPersonOrcid not mapped

Peter Schober peter.schober at univie.ac.at
Wed Feb 8 11:34:59 UTC 2023


* Annalena Reuss via users <users at shibboleth.net> [2023-02-08 10:06]:
> (2) attribute-policy.xml:
> <AttributeRule attributeID="eduPersonOrcid" permitAny="true"></AttributeRule>

That shouldn't be necesary unless you have removed the catch-all rule
near the end that allows everything *not* handled above:
  <AttributeRule attributeID="*" permitAny="true"/>

> (3) shibd.log:
> Shibboleth.AttributeExtractor.XML : creating mapping for Attribute
> urn:oid:1.3.6.1.4.1.5923.1.1.1.16
> [...]
> Shibboleth.AttributeExtractor.XML [4] [default]: skipping SAML 2.0 Attribute
> with Name: 1.3.6.1.4.1.5923.1.1.1.16

urn:oid:1.3.6.1.4.1.5923.1.1.1.16  != 1.3.6.1.4.1.5923.1.1.1.16

I.e., the IDP sending this is misconfigured. Your SP is fine.

-peter


More information about the users mailing list