Attribute mapping problem

[Nate Klingenstein]

Spencer,

There's a mismatch in the NameFormat.  One is expressly basic, and the
other is defaulting to URI.  You should work with the IdP to agree on what
you're sending, and since it's a URI, I would recommend URI.

Thanks,
Nate

On Thu, Feb 9, 2023 at 10:11 AM Spencer Thomas via users <
users at shibboleth.net> wrote:

> Running SP 3.4.0, an IdP is sending (in part) this attribute:
>
>
>
>             <saml2:Attribute
> FriendlyName="urn:oid:1.3.6.1.4.1.5923.1.1.1.9"
>
>                              Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.9"
>
>
> NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"
>
>                              >
>
>                 <saml2:AttributeValue xmlns:xsi=
> http://www.w3.org/2001/XMLSchema-instance
>
>                                       xsi:type="xs:string"
>
>                                       >staff at college.edu
> </saml2:AttributeValue>
>
>             </saml2:Attribute>
>
>
>
> Our attribute-map.xml file has (in part) this mapping:
>
>     <Attribute name="urn:oid:1.3.6.1.4.1.5923.1.1.1.9"
> id="eduPersonScopedAffiliation">
>
>         <AttributeDecoder xsi:type="ScopedAttributeDecoder"
> caseSensitive="false"/>
>
>     </Attribute>
>
>
>
> And I see this error in the shibd log
>
>
>
> 2023-02-03 20:08:11 INFO Shibboleth.AttributeExtractor.XML [12] [default]:
> skipping SAML 2.0 Attribute with Name: urn:oid:1.3.6.1.4.1.5923.1.1.1.9,
> Format:urn:oasis:names:tc:SAML:2.0:attrname-format:basic
>
>
>
> What can I advise the IdP owner to change, and/or what can I change to
> accept this value? I note that we have lots of other IdPs sending this
> attribute without problem, although I do not have the exact XML for those
> IdPs. In this case, the IdP maintainer sent us the attribute XML as logged
> at his end.
> --
> For Consortium Member technical support, see
> https://shibboleth.atlassian.net/wiki/x/ZYEpPw
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20230209/a498ec77/attachment.htm>