eduPersonOrcid not mapped
Peter Schober
peter.schober at univie.ac.at
Wed Feb 8 11:34:59 UTC 2023
* Annalena Reuss via users <users at shibboleth.net> [2023-02-08 10:06]:
> (2) attribute-policy.xml:
> <AttributeRule attributeID="eduPersonOrcid" permitAny="true"></AttributeRule>
That shouldn't be necesary unless you have removed the catch-all rule
near the end that allows everything *not* handled above:
<AttributeRule attributeID="*" permitAny="true"/>
> (3) shibd.log:
> Shibboleth.AttributeExtractor.XML : creating mapping for Attribute
> urn:oid:1.3.6.1.4.1.5923.1.1.1.16
> [...]
> Shibboleth.AttributeExtractor.XML [4] [default]: skipping SAML 2.0 Attribute
> with Name: 1.3.6.1.4.1.5923.1.1.1.16
urn:oid:1.3.6.1.4.1.5923.1.1.1.16 != 1.3.6.1.4.1.5923.1.1.1.16
I.e., the IDP sending this is misconfigured. Your SP is fine.
-peter
More information about the users
mailing list