Attribute mapping problem
Spencer Thomas
Spencer.Thomas at ithaka.org
Thu Feb 9 17:11:18 UTC 2023
Running SP 3.4.0, an IdP is sending (in part) this attribute:
<saml2:Attribute FriendlyName="urn:oid:1.3.6.1.4.1.5923.1.1.1.9"
Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.9"
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"
>
<saml2:AttributeValue xmlns:xsi=http://www.w3.org/2001/XMLSchema-instance
xsi:type="xs:string"
>staff at college.edu</saml2:AttributeValue>
</saml2:Attribute>
Our attribute-map.xml file has (in part) this mapping:
<Attribute name="urn:oid:1.3.6.1.4.1.5923.1.1.1.9" id="eduPersonScopedAffiliation">
<AttributeDecoder xsi:type="ScopedAttributeDecoder" caseSensitive="false"/>
</Attribute>
And I see this error in the shibd log
2023-02-03 20:08:11 INFO Shibboleth.AttributeExtractor.XML [12] [default]: skipping SAML 2.0 Attribute with Name: urn:oid:1.3.6.1.4.1.5923.1.1.1.9, Format:urn:oasis:names:tc:SAML:2.0:attrname-format:basic
What can I advise the IdP owner to change, and/or what can I change to accept this value? I note that we have lots of other IdPs sending this attribute without problem, although I do not have the exact XML for those IdPs. In this case, the IdP maintainer sent us the attribute XML as logged at his end.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20230209/026e343d/attachment.htm>
More information about the users
mailing list