logs not matching resolver test

Cantor, Scott cantor.2 at osu.edu
Tue Mar 7 20:28:20 UTC 2023


I ran a test, this is what I see on DEBUG after the filtering step.

Other than the NameID generation step, there is very little. You do see the "attempting to transcode" and subsequent bits, which is pretty much what should come out when it's trying to do that part. So that's pretty much what you want to look for.

-- Scott

15:23:44.913 - 127.0.0.1 - DEBUG [net.shibboleth.idp.saml.profile.impl.InitializeOutboundMessageContext:153] - Profile Action InitializeOutboundMessageContext: Initialized outbound message context
15:23:44.914 - 127.0.0.1 - DEBUG [net.shibboleth.idp.saml.profile.impl.BaseAddAttributeStatementToAssertion:275] - Profile Action AddAttributeStatementToAssertion: Attempting to add an AttributeStatement to outgoing Assertion
15:23:44.914 - 127.0.0.1 - DEBUG [net.shibboleth.idp.saml.saml2.profile.impl.AddAttributeStatementToAssertion:224] - Profile Action AddAttributeStatementToAssertion: Attempting to encode attribute mail as a SAML 2 Attribute
15:23:44.914 - 127.0.0.1 - DEBUG [net.shibboleth.idp.attribute.transcoding.AbstractAttributeTranscoder:151] - Transcoder inactive
15:23:44.914 - 127.0.0.1 - DEBUG [net.shibboleth.idp.attribute.transcoding.AbstractAttributeTranscoder:151] - Transcoder inactive
15:23:44.915 - 127.0.0.1 - DEBUG [net.shibboleth.idp.saml.attribute.transcoding.SAMLEncoderSupport:78] - Encoding value cantor.2 at osu.edu of attribute mail
15:23:44.915 - 127.0.0.1 - DEBUG [org.opensaml.saml.saml2.profile.SAML2ActionSupport:81] - Profile Action AddAttributeStatementToAssertion: Created Assertion _3d721f37175364a0a0391b82d5c593d5
15:23:44.915 - 127.0.0.1 - DEBUG [net.shibboleth.idp.saml.saml2.profile.impl.AddAttributeStatementToAssertion:114] - Profile Action AddAttributeStatementToAssertion: Adding constructed AttributeStatement to Assertion _3d721f37175364a0a0391b82d5c593d5 
15:23:44.918 - 127.0.0.1 - DEBUG [org.opensaml.saml.saml2.profile.impl.AddNameIDToSubjects:284] - Profile Action AddNameIDToSubjects: Attempting to add NameID to outgoing Assertion Subjects
15:23:44.918 - 127.0.0.1 - DEBUG [org.opensaml.saml.common.profile.logic.AbstractNameIDPolicyPredicate:132] - No object to operate on, returning true
15:23:44.918 - 127.0.0.1 - DEBUG [org.opensaml.saml.common.profile.logic.MetadataNameIdentifierFormatStrategy:80] - Metadata specifies the following formats: [urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress]
15:23:44.918 - 127.0.0.1 - DEBUG [net.shibboleth.idp.saml.profile.logic.DefaultNameIdentifierFormatStrategy:115] - Using overridden profile configuration ID: http://shibboleth.net/ns/profiles/saml2/sso/browser
15:23:44.918 - 127.0.0.1 - DEBUG [net.shibboleth.idp.saml.profile.logic.DefaultNameIdentifierFormatStrategy:126] - Configuration specifies the following formats: []
15:23:44.918 - 127.0.0.1 - DEBUG [net.shibboleth.idp.saml.profile.logic.DefaultNameIdentifierFormatStrategy:145] - Configuration did not specify any formats, relying on metadata alone
15:23:44.918 - 127.0.0.1 - DEBUG [org.opensaml.saml.saml2.profile.impl.AddNameIDToSubjects:321] - Profile Action AddNameIDToSubjects: Candidate NameID formats: [urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress]
15:23:44.919 - 127.0.0.1 - DEBUG [org.opensaml.saml.saml2.profile.impl.AddNameIDToSubjects:393] - Profile Action AddNameIDToSubjects: Trying to generate NameID with Format urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress
15:23:44.919 - 127.0.0.1 - DEBUG [org.opensaml.saml.common.profile.impl.ChainingNameIdentifierGenerator:103] - Trying to generate identifier with Format urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress
15:23:44.919 - 127.0.0.1 - DEBUG [net.shibboleth.idp.saml.nameid.impl.AttributeSourcedSAML2NameIDGenerator:191] - Checking for source attribute ConcurID
15:23:44.919 - 127.0.0.1 - DEBUG [net.shibboleth.idp.saml.nameid.impl.AttributeSourcedSAML2NameIDGenerator:191] - Checking for source attribute mail
15:23:44.919 - 127.0.0.1 - DEBUG [net.shibboleth.idp.saml.nameid.impl.AttributeSourcedSAML2NameIDGenerator:210] - Generating NameID from String-valued attribute mail
15:23:44.919 - 127.0.0.1 - DEBUG [org.opensaml.saml.saml2.profile.AbstractSAML2NameIDGenerator:95] - Generating NameID cantor.2 at osu.edu with Format urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress
15:23:44.919 - 127.0.0.1 - DEBUG [org.opensaml.saml.common.profile.impl.ChainingNameIdentifierGenerator:115] - Successfully generated identifier with Format urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress
15:23:44.919 - 127.0.0.1 - DEBUG [org.opensaml.saml.saml2.profile.impl.AddNameIDToSubjects:397] - Profile Action AddNameIDToSubjects: Successfully generated NameID with Format urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress
15:23:44.919 - 127.0.0.1 - DEBUG [org.opensaml.saml.saml2.profile.impl.AddNameIDToSubjects:355] - Profile Action AddNameIDToSubjects: Added NameID to 1 assertion subject(s)



More information about the users mailing list