<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:st1="urn:schemas-microsoft-com:office:smarttags" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=Content-Type content="text/html; charset=us-ascii">
<meta name=ProgId content=Word.Document>
<meta name=Generator content="Microsoft Word 11">
<meta name=Originator content="Microsoft Word 11">
<link rel=File-List href="cid:filelist.xml@01CC8CE4.AAA08360">
<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags"
name="City"/>
<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags"
name="State"/>
<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags"
name="place"/>
<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags"
name="PersonName"/>
<!--[if gte mso 9]><xml>
<o:OfficeDocumentSettings>
<o:DoNotRelyOnCSS/>
</o:OfficeDocumentSettings>
</xml><![endif]--><!--[if gte mso 9]><xml>
<w:WordDocument>
<w:DisplayBackgroundShape/>
<w:SpellingState>Clean</w:SpellingState>
<w:GrammarState>Clean</w:GrammarState>
<w:DocumentKind>DocumentEmail</w:DocumentKind>
<w:EnvelopeVis/>
<w:PunctuationKerning/>
<w:ValidateAgainstSchemas/>
<w:SaveIfXMLInvalid>false</w:SaveIfXMLInvalid>
<w:IgnoreMixedContent>false</w:IgnoreMixedContent>
<w:AlwaysShowPlaceholderText>false</w:AlwaysShowPlaceholderText>
<w:Compatibility>
<w:BreakWrappedTables/>
<w:SnapToGridInCell/>
<w:WrapTextWithPunct/>
<w:UseAsianBreakRules/>
<w:DontGrowAutofit/>
</w:Compatibility>
<w:BrowserLevel>MicrosoftInternetExplorer4</w:BrowserLevel>
</w:WordDocument>
</xml><![endif]--><!--[if gte mso 9]><xml>
<w:LatentStyles DefLockedState="false" LatentStyleCount="156">
</w:LatentStyles>
</xml><![endif]--><!--[if !mso]>
<style>
st1\:*{behavior:url(#default#ieooui) }
</style>
<![endif]-->
<style>
<!--
/* Font Definitions */
@font-face
        {font-family:Wingdings;
        panose-1:5 0 0 0 0 0 0 0 0 0;
        mso-font-charset:2;
        mso-generic-font-family:auto;
        mso-font-pitch:variable;
        mso-font-signature:0 268435456 0 0 -2147483648 0;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
        {mso-style-parent:"";
        margin:0in;
        margin-bottom:.0001pt;
        mso-pagination:widow-orphan;
        font-size:12.0pt;
        font-family:"Times New Roman";
        mso-fareast-font-family:"Times New Roman";}
a:link, span.MsoHyperlink
        {color:blue;
        text-decoration:underline;
        text-underline:single;}
a:visited, span.MsoHyperlinkFollowed
        {color:purple;
        text-decoration:underline;
        text-underline:single;}
span.EmailStyle17
        {mso-style-type:personal-compose;
        mso-style-noshow:yes;
        mso-ansi-font-size:14.0pt;
        mso-bidi-font-size:14.0pt;
        font-family:"Times New Roman";
        mso-ascii-font-family:"Times New Roman";
        mso-hansi-font-family:"Times New Roman";
        mso-bidi-font-family:"Times New Roman";
        color:windowtext;
        mso-text-animation:none;
        font-weight:normal;
        font-style:normal;
        text-decoration:none;
        text-underline:none;
        text-decoration:none;
        text-line-through:none;}
span.SpellE
        {mso-style-name:"";
        mso-spl-e:yes;}
span.GramE
        {mso-style-name:"";
        mso-gram-e:yes;}
@page Section1
        {size:8.5in 11.0in;
        margin:1.0in 1.25in 1.0in 1.25in;
        mso-header-margin:.5in;
        mso-footer-margin:.5in;
        mso-paper-source:0;}
div.Section1
        {page:Section1;}
-->
</style>
<!--[if gte mso 10]>
<style>
/* Style Definitions */
table.MsoNormalTable
        {mso-style-name:"Table Normal";
        mso-tstyle-rowband-size:0;
        mso-tstyle-colband-size:0;
        mso-style-noshow:yes;
        mso-style-parent:"";
        mso-padding-alt:0in 5.4pt 0in 5.4pt;
        mso-para-margin:0in;
        mso-para-margin-bottom:.0001pt;
        mso-pagination:widow-orphan;
        font-size:10.0pt;
        font-family:"Times New Roman";
        mso-ansi-language:#0400;
        mso-fareast-language:#0400;
        mso-bidi-language:#0400;}
</style>
<![endif]-->
</head>
<body lang=EN-US link=blue vlink=purple style='tab-interval:.5in'>
<div class=Section1>
<div style='mso-element:para-border-div;border:none;border-bottom:solid windowtext 1.0pt;
mso-border-bottom-alt:solid windowtext .75pt;padding:0in 0in 1.0pt 0in'>
<p class=MsoNormal style='border:none;mso-border-bottom-alt:solid windowtext .75pt;
padding:0in;mso-padding-alt:0in 0in 1.0pt 0in'><font size=4 color=blue
face="Times New Roman"><span style='font-size:14.0pt;color:blue'>Hi, I am
trying to construct the <span class=SpellE>eppn</span> attribute. I believe I
have done so, as <a href="mailto:leonard.kroll@umassb.net">leonard.kroll@umassb.net</a>.
It is included in the attribute statement below. It looks correct to me, but is
not accepted by the <span class=SpellE>EDUCause</span> SP. <span class=GramE>Any
suggestions?</span> <span class=GramE>Hints,</span> help </span></font><font
size=4 color=blue face=Wingdings><span style='font-size:14.0pt;font-family:
Wingdings;mso-ascii-font-family:"Times New Roman";mso-hansi-font-family:"Times New Roman";
color:blue;mso-char-type:symbol;mso-symbol-font-family:Wingdings'><span
style='mso-char-type:symbol;mso-symbol-font-family:Wingdings'>J</span></span></font><font
size=4 color=blue><span style='font-size:14.0pt;color:blue'><o:p></o:p></span></font></p>
<p class=MsoNormal style='border:none;mso-border-bottom-alt:solid windowtext .75pt;
padding:0in;mso-padding-alt:0in 0in 1.0pt 0in'><font size=4 color=blue
face="Times New Roman"><span style='font-size:14.0pt;color:blue'><o:p> </o:p></span></font></p>
<p class=MsoNormal style='border:none;mso-border-bottom-alt:solid windowtext .75pt;
padding:0in;mso-padding-alt:0in 0in 1.0pt 0in'><font size=4 color=blue
face="Times New Roman"><span style='font-size:14.0pt;color:blue'><o:p> </o:p></span></font></p>
</div>
<p class=MsoNormal><font size=4 color=blue face="Times New Roman"><span
style='font-size:14.0pt;color:blue'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=4 color=blue face="Times New Roman"><span
style='font-size:14.0pt;color:blue'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=4 color=blue face="Times New Roman"><span
style='font-size:14.0pt;color:blue'>Log File: <span class=SpellE>idp-process.log</span><o:p></o:p></span></font></p>
<p class=MsoNormal><font size=4 color=blue face="Times New Roman"><span
style='font-size:14.0pt;color:blue'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=4 color=blue face="Times New Roman"><span
style='font-size:14.0pt;color:blue'><span style='mso-spacerun:yes'>
</span><saml2<span class=GramE>:AttributeStatement</span>><o:p></o:p></span></font></p>
<p class=MsoNormal><font size=4 color=blue face="Times New Roman"><span
style='font-size:14.0pt;color:blue'><span
style='mso-spacerun:yes'>
</span><saml2:Attribute <span class=SpellE>FriendlyName</span>="mail"
Name="urn:oid:0.9.2342.19200300.100.1.3" <span class=SpellE>NameFormat</span>="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><o:p></o:p></span></font></p>
<p class=MsoNormal><font size=4 color=blue face="Times New Roman"><span
style='font-size:14.0pt;color:blue'><span
style='mso-spacerun:yes'>
</span><saml2<span class=GramE>:AttributeValue</span> <span class=SpellE>xmlns:xsi</span>="http://www.w3.org/2001/XMLSchema-instance"
xsi:type="xs:string">Leonard.Kroll@umb.edu</saml2:AttributeValue><o:p></o:p></span></font></p>
<p class=MsoNormal><font size=4 color=blue face="Times New Roman"><span
style='font-size:14.0pt;color:blue'><span
style='mso-spacerun:yes'> </span></saml2<span
class=GramE>:Attribute</span>><o:p></o:p></span></font></p>
<p class=MsoNormal><font size=4 color=teal face="Times New Roman"><span
style='font-size:14.0pt;color:teal'><span
style='mso-spacerun:yes'>
</span><saml2:Attribute <span class=SpellE>FriendlyName</span>="<span
class=SpellE>eduPersonPrincipalName</span>"
Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" <span class=SpellE>NameFormat</span>="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><o:p></o:p></span></font></p>
<p class=MsoNormal><font size=4 color=teal face="Times New Roman"><span
style='font-size:14.0pt;color:teal'><span
style='mso-spacerun:yes'>
</span><saml2<span class=GramE>:AttributeValue</span> <span class=SpellE>xmlns:xsi</span>="http://www.w3.org/2001/XMLSchema-instance"
xsi:type="xs:string">Leonard.Kroll@umassb.net</saml2:AttributeValue><o:p></o:p></span></font></p>
<p class=MsoNormal><font size=4 color=teal face="Times New Roman"><span
style='font-size:14.0pt;color:teal'><span
style='mso-spacerun:yes'> </span></saml2<span
class=GramE>:Attribute</span>><o:p></o:p></span></font></p>
<p class=MsoNormal><font size=4 color=blue face="Times New Roman"><span
style='font-size:14.0pt;color:blue'><span
style='mso-spacerun:yes'>
</span><saml2:Attribute <span class=SpellE>FriendlyName</span>="<span
class=SpellE>givenName</span>" Name="urn:oid:2.5.4.42" <span
class=SpellE>NameFormat</span>="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><o:p></o:p></span></font></p>
<p class=MsoNormal><font size=4 color=blue face="Times New Roman"><span
style='font-size:14.0pt;color:blue'><span
style='mso-spacerun:yes'>
</span><saml2<span class=GramE>:AttributeValue</span> <span class=SpellE>xmlns:xsi</span>="http://www.w3.org/2001/XMLSchema-instance"
<span class=SpellE>xsi:type</span>="<span class=SpellE>xs:string</span>">Leonard</saml2:AttributeValue><o:p></o:p></span></font></p>
<p class=MsoNormal><font size=4 color=blue face="Times New Roman"><span
style='font-size:14.0pt;color:blue'><span
style='mso-spacerun:yes'> </span></saml2<span
class=GramE>:Attribute</span>><o:p></o:p></span></font></p>
<p class=MsoNormal><font size=4 color=blue face="Times New Roman"><span
style='font-size:14.0pt;color:blue'><span
style='mso-spacerun:yes'>
</span><saml2:Attribute <span class=SpellE>FriendlyName</span>="<span
class=SpellE>sn</span>" Name="urn:oid:2.5.4.4" <span
class=SpellE>NameFormat</span>="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><o:p></o:p></span></font></p>
<p class=MsoNormal><font size=4 color=blue face="Times New Roman"><span
style='font-size:14.0pt;color:blue'><span
style='mso-spacerun:yes'>
</span><saml2<span class=GramE>:AttributeValue</span> <span class=SpellE>xmlns:xsi</span>="http://www.w3.org/2001/XMLSchema-instance"
<span class=SpellE>xsi:type</span>="<span class=SpellE>xs:string</span>">Kroll</saml2:AttributeValue><o:p></o:p></span></font></p>
<p class=MsoNormal><font size=4 color=blue face="Times New Roman"><span
style='font-size:14.0pt;color:blue'><span
style='mso-spacerun:yes'> </span></saml2<span
class=GramE>:Attribute</span>><o:p></o:p></span></font></p>
<div style='mso-element:para-border-div;border:none;border-bottom:solid windowtext 1.0pt;
mso-border-bottom-alt:solid windowtext .75pt;padding:0in 0in 1.0pt 0in'>
<p class=MsoNormal style='border:none;mso-border-bottom-alt:solid windowtext .75pt;
padding:0in;mso-padding-alt:0in 0in 1.0pt 0in'><font size=4 color=blue
face="Times New Roman"><span style='font-size:14.0pt;color:blue'><span
style='mso-spacerun:yes'> </span></saml2<span class=GramE>:AttributeStatement</span>><o:p></o:p></span></font></p>
<p class=MsoNormal style='border:none;mso-border-bottom-alt:solid windowtext .75pt;
padding:0in;mso-padding-alt:0in 0in 1.0pt 0in'><font size=4 color=blue
face="Times New Roman"><span style='font-size:14.0pt;color:blue'><o:p> </o:p></span></font></p>
<p class=MsoNormal style='border:none;mso-border-bottom-alt:solid windowtext .75pt;
padding:0in;mso-padding-alt:0in 0in 1.0pt 0in'><font size=4 color=blue
face="Times New Roman"><span style='font-size:14.0pt;color:blue'><o:p> </o:p></span></font></p>
</div>
<p class=MsoNormal><font size=4 color=blue face="Times New Roman"><span
style='font-size:14.0pt;color:blue'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=4 color=blue face="Times New Roman"><span
style='font-size:14.0pt;color:blue'>Attribute filter:<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'><span style='mso-spacerun:yes'> </span><<span
class=SpellE>afp<span class=GramE>:AttributeFilterPolicy</span></span>
id="<span class=SpellE>eduPersonPrincipalName</span>"> <o:p></o:p></span></font></p>
<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'><span
style='mso-spacerun:yes'> </span><<span
class=SpellE>afp<span class=GramE>:PolicyRequirementRule</span></span> <span
class=SpellE>xsi:type</span>="<span class=SpellE>basic:ANY</span>"/><o:p></o:p></span></font></p>
<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'><span
style='mso-spacerun:yes'> </span><<span
class=SpellE>afp<span class=GramE>:AttributeRule</span></span> <span
class=SpellE>attributeID</span>="<span class=SpellE>eduPersonPrincipalName</span>"><o:p></o:p></span></font></p>
<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'><span
style='mso-spacerun:yes'>
</span><<span class=SpellE>afp<span class=GramE>:PermitValueRule</span></span>
<span class=SpellE>xsi:type</span>="<span class=SpellE>basic:ANY</span>"/><o:p></o:p></span></font></p>
<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'><span
style='mso-spacerun:yes'>
</span></<span class=SpellE>afp<span class=GramE>:AttributeRule</span></span>><o:p></o:p></span></font></p>
<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'><span style='mso-spacerun:yes'> </span></<span
class=SpellE>afp<span class=GramE>:AttributeFilterPolicy</span></span>><o:p></o:p></span></font></p>
<div style='mso-element:para-border-div;border:none;border-bottom:solid windowtext 1.0pt;
mso-border-bottom-alt:solid windowtext .75pt;padding:0in 0in 1.0pt 0in'>
<p class=MsoNormal style='border:none;mso-border-bottom-alt:solid windowtext .75pt;
padding:0in;mso-padding-alt:0in 0in 1.0pt 0in'><font size=4
face="Times New Roman"><span style='font-size:14.0pt'><o:p> </o:p></span></font></p>
<p class=MsoNormal style='border:none;mso-border-bottom-alt:solid windowtext .75pt;
padding:0in;mso-padding-alt:0in 0in 1.0pt 0in'><font size=4
face="Times New Roman"><span style='font-size:14.0pt'><o:p> </o:p></span></font></p>
</div>
<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=4 color=blue face="Times New Roman"><span
style='font-size:14.0pt;color:blue'>Attribute Definition:<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'><<span class=SpellE>resolver<span class=GramE>:AttributeDefinition</span></span>
<span class=SpellE>xsi:type</span>="<span class=SpellE>ad:Scoped</span>"
id="<span class=SpellE>eppn</span>" scope="umassb.net" <span
class=SpellE>sourceAttributeID</span>="<span class=SpellE>samaccountname</span>"><o:p></o:p></span></font></p>
<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'><<span class=SpellE>resolver<span class=GramE>:Dependency</span></span>
ref="<span class=SpellE>myLDAP</span>" /><o:p></o:p></span></font></p>
<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'><<span class=SpellE>resolver<span class=GramE>:AttributeEncoder</span></span>
<span class=SpellE>xsi:type</span>="enc:SAML1ScopedString"
name="<span class=SpellE>urn:mace:dir:attribute-def:eduPersonPrincipalName</span>"
/><o:p></o:p></span></font></p>
<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'><<span class=SpellE>resolver<span class=GramE>:AttributeEncoder</span></span>
<span class=SpellE>xsi:type</span>="enc:SAML2ScopedString"
name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" <span class=SpellE>friendlyName</span>="<span
class=SpellE>eduPersonPrincipalName</span>" /><o:p></o:p></span></font></p>
<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'></<span class=SpellE>resolver<span class=GramE>:AttributeDefinition</span></span>><o:p></o:p></span></font></p>
<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'><o:p> </o:p></span></font></p>
<p class=MsoNormal><st1:PersonName w:st="on"><em><i><font size=4
face="Times New Roman"><span style='font-size:13.5pt;mso-no-proof:yes'>Leonard
Kroll</span></font></i></em></st1:PersonName><i><font size=4 color=blue><span
style='font-size:13.5pt;color:blue;font-style:italic;mso-no-proof:yes'><br>
</span></font></i><em><i><font size=4 face="Times New Roman"><span
style='font-size:13.5pt;mso-no-proof:yes'>UNIX / GIS Administrator</span></font></i></em><i><font
size=4 color=blue><span style='font-size:13.5pt;color:blue;font-style:italic;
mso-no-proof:yes'><br>
</span></font><em><i><font face="Times New Roman"><span style='mso-no-proof:
yes'>Univ. <st1:State w:st="on">Massachusetts</st1:State> <st1:place w:st="on"><st1:City
w:st="on">Boston</st1:City></st1:place></span></font></i></em><font
color=blue><span style='color:blue;mso-no-proof:yes'><br>
</span></font></i><a href="mailto:at@umb.edu"><em><i><font color=black
face="Times New Roman"><span style='color:windowtext;mso-no-proof:yes;
text-decoration:none;text-underline:none'>Leonard(dot)Kroll(at)umb.edu</span></font></i></em></a><span
style='mso-no-proof:yes'><br>
<em><i><font face="Times New Roman">Phone: 617-287-5048</font></i></em><i><font
color=blue><span style='color:blue;font-style:italic'><br>
</span></font><em><i><font face="Times New Roman">fax:
617-287-5224</font></i></em></i></span><em><i><font color=blue
face="Times New Roman"><span style='color:blue'><o:p></o:p></span></font></i></em></p>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'><o:p> </o:p></span></font></p>
</div>
</body>
</html>