<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii">
<META NAME="Generator" CONTENT="MS Exchange Server version 6.5.7654.12">
<TITLE>RE: Problems getting "eppn" to be accepted by SP.</TITLE>
</HEAD>
<BODY>
<!-- Converted from text/rtf format -->
<P DIR=LTR><SPAN LANG="en-us"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=4>Hi, I had the InCommon metadata changes so the scope is now</FONT></SPAN><SPAN LANG="en-us"><FONT SIZE=4> correct.</FONT></SPAN><SPAN LANG="en-us"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=4><shibmd:Scope regexp="false"></FONT></SPAN><SPAN LANG="en-us"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=4>umassb.net</FONT></SPAN><SPAN LANG="en-us"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=4></shibmd:Scope></FONT></SPAN><SPAN LANG="en-us"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=4>Any ideas on what I am doing wrong?</FONT></SPAN><SPAN LANG="en-us"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=4>Scope line from InCommon.</FONT></SPAN><SPAN LANG="en-us"><FONT SIZE=4>metadata:</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"> </SPAN><SPAN LANG="en-us"> <FONT SIZE=4><shibmd:Scope regexp="false">umassb.net</shibmd:Scope></FONT></SPAN><SPAN LANG="en-us"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT COLOR="#0000FF" SIZE=4>Idp-process.log:</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=4></saml2:Attribute></FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=4> <saml2:Attribute FriendlyName="eppn" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"></FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=4> <saml2:AttributeValue xmlns:xsi="<A HREF="http://www.w3.org/2001/XMLSchema-instance">http://www.w3.org/2001/XMLSchema-instance</A>" xsi:type="xs:string">Leonard.Kroll@umassb.net</saml2:AttributeValue></FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=4></saml2:Attribute></FONT></SPAN><SPAN LANG="en-us"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><A NAME=""><SPAN LANG="en-us"><FONT SIZE=4>Leonard Kroll</FONT></SPAN></A></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=4>UNIX / GIS Administrator</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=4>Univ. Massachusetts Boston</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=4>Leonard(dot)Kroll(at)umb.edu</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=4>Phone: 617-287-5048</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=4>fax: 617-287-5224</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=4>-----Original Message-----<BR>
From: users-bounces@shibboleth.net [<A HREF="mailto:users-bounces@shibboleth.net">mailto:users-bounces@shibboleth.net</A>] On Behalf Of Nate Klingenstein<BR>
Sent: Monday, October 17, 2011 4:02 PM<BR>
To: Shib Users<BR>
Subject: Re: Problems getting "eppn" to be accepted by SP.</FONT></SPAN><SPAN LANG="en-us"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=4>Leonard,</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=4>Your problem is likely that in your metadata, as loaded by the </FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=4>EDUCAUSE SP, doesn't indicate that your IdP is authoritative for the </FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=4>umassb.net domain. If that metadata is the InCommon metadata, it reads:</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=4> <shibmd:Scope regexp="false">vm-shibboleth.umassb.net</ </FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=4>shibmd:Scope></FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=4>You'll need to ask InCommon to change that to umassb.net.</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=4>Take care,</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=4>Nate.</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=4>On Oct 17, 2011, at 19:51 , Leonard Kroll wrote:</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=4>> Hi, I am trying to construct the eppn attribute. I believe I have </FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=4>> done so, as leonard.kroll@umassb.net. It is included in the </FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=4>> attribute statement below. It looks correct to me, but is not </FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=4>> accepted by the EDUCause SP. Any suggestions?Hints, help J</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=4>--</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=4>To unsubscribe from this list send an email to users-unsubscribe@shibboleth.net</FONT></SPAN><SPAN LANG="en-us"></SPAN></P>
</BODY>
</HTML>