Add attributes map to SP3 (supann)

[Jehan PROCACCIA]

I did used samlTracer in the browser, 
and it does shows the 6 "traditionals" attributes as shid.log showed [1] 
but none of the supann* attributes which however seemed to get sent by the IDP , as shown in idp-process.log [2] 
anyway, I guess that samlTracer show the very end of the flow, if they are not shown in shibd.log , they would'nt in samlTracer (?) 
I suspect that the shibd.log messages: 
unable to extract attributes, unknown XML object type: 
might be the clue ? a naming pb ? attributeencoder ? 

thanks for your help . 

[1] 
2023-01-13 19:46:24 DEBUG Shibboleth.AttributeFilter [2] [default]: filtering 6 attribute(s) from ( [ https://idp4.tsp.eu/idp/shibboleth | https://idp4.tsp.eu/idp/shibboleth ] ) 
2023-01-13 19:46:24 DEBUG Shibboleth.AttributeFilter [2] [default]: applying filtering rule(s) for attribute (givenName) from ( [ https://idp4.tsp.eu/idp/shibboleth | https://idp4.tsp.eu/idp/shibboleth ] ) 
2023-01-13 19:46:24 DEBUG Shibboleth.AttributeFilter [2] [default]: applying filtering rule(s) for attribute (displayName) from ( [ https://idp4.tsp.eu/idp/shibboleth | https://idp4.tsp.eu/idp/shibboleth ] ) 
2023-01-13 19:46:24 DEBUG Shibboleth.AttributeFilter [2] [default]: applying filtering rule(s) for attribute (mail) from ( [ https://idp4.tsp.eu/idp/shibboleth | https://idp4.tsp.eu/idp/shibboleth ] ) 
2023-01-13 19:46:24 DEBUG Shibboleth.AttributeFilter [2] [default]: applying filtering rule(s) for attribute (unscoped-affiliation) from ( [ https://idp4.tsp.eu/idp/shibboleth | https://idp4.tsp.eu/idp/shibboleth ] ) 
2023-01-13 19:46:24 DEBUG Shibboleth.AttributeFilter [2] [default]: applying filtering rule(s) for attribute (eppn) from ( [ https://idp4.sp.eu/idp/shibboleth | https://idp4.sp.eu/idp/shibboleth ] ) 
2023-01-13 19:46:24 DEBUG Shibboleth.AttributeFilter [2] [default]: applying filtering rule(s) for attribute (sn) from ( [ https://idp4.tsp.eu/idp/shibboleth | https://idp4.tsp.eu/idp/shibboleth ] ) 

14Z| supannEntiteAffectation ,mail,eduPersonAffiliation,displayName,givenName,eduPersonPrincipalName,sn, supannAutreMai l, supannRessourceEtat| 


De: "db--- via users" <users at shibboleth.net> 
À: "Shib Users" <users at shibboleth.net> 
Cc: "db at alaska.edu" <dabantz at alaska.edu> 
Envoyé: Vendredi 13 Janvier 2023 20:23:07 
Objet: Re: Add attributes map to SP3 (supann) 

Use samlTracer in browser to know whether the attributes are actually sent, and if so, the exact names your SP needs to look for and map. (Turn off saml encryption for this test.) 

David.Bantz @Alaska.edu 




On Jan 13, 2023, at 10:12, Jehan PROCACCIA <jehan.procaccia at tem-tsp.eu> wrote: 





BQ_BEGIN

I did restarted shibd 
for the second most obvious pb, perhaps the IDP finally doesn't sent the attributes, although I did restarted tomcat, and in idp-process.log [1] I do see the attribute beeing mentioned (and it does resolves with aacli ) 
I am lost, where should I try to resolve this problem, on the IDP side and/or SP side ? my supann* attributes seems to get lost in between 
… 

BQ_END

-- 
For Consortium Member technical support, see https://shibboleth.atlassian.net/wiki/x/ZYEpPw 
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20230113/cf8ef935/attachment.htm>