<html><body><div style="color:#000; background-color:#fff; font-family:arial, helvetica, sans-serif;font-size:12pt"><div><div><span style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; display: inline; float: none; ">Well, since I have not aroused the ire of Scott or Tom in a while, here goes :)</span></div><div><span style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; display: inline; float: none; "><br></span></div><div><span style="color: rgb(34, 34, 34); font-family: arial,
sans-serif; font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; display: inline; float: none; ">I am running Shibboleth 2.x on IIS.</span></div><div><span style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; display: inline; float: none; "><br></span></div><div><span style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing:
0px; display: inline; float: none; ">I am trying to get attributes to pass from an Idp based on the OpenAM 10 service. We connect just fine. Just trying to get the attributes to pass through...</span></div><div><span style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; display: inline; float: none; "><br></span></div><div><span style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; display: inline; float: none; ">They are passing a standard LDAP mail attribute.</span><div
style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; "><br></div><div style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; ">From their assertion:</div><div style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; "><br></div><div style="color: rgb(34, 34,
34); font-family: arial, sans-serif; font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; "><div><saml:AttributeStatement></div><div><saml:Attribute Name="mail"></div><div><saml:AttributeValue xmlns:xs="<a rel="nofollow" target="_blank" href="http://www.w3.org/2001/XMLSchema" style="text-decoration: underline; color: rgb(17, 85, 204); outline-width: 0px; outline-style: initial; outline-color: initial; "><span class="yshortcuts" id="lw_1340215536_0" style="cursor: pointer; color: rgb(54, 99, 136); ">http://www.w3.org/ 2001/XMLSchema</span></a>" xmlns:xsi="<a rel="nofollow" target="_blank" href="http://www.w3.org/2001/XMLSchema-instance" style="text-decoration: underline; color: rgb(17, 85, 204); outline-width: 0px; outline-style: initial; outline-color: initial;
"><span class="yshortcuts" id="lw_1340215536_1" style="cursor: pointer; color: rgb(54, 99, 136); ">http://www.w3.org/ 2001/XMLSchema-instance</span></a>" xsi:type="xs:string"><a rel="nofollow" ymailto="mailto:auser@someplace.com" target="_blank" href="mailto:auser@someplace.com" style="text-decoration: underline; color: rgb(17, 85, 204); outline-width: 0px; outline-style: initial; outline-color: initial; ">auser@ someplace.com</a></saml: AttributeValue></div><div></saml:Attribute></div><div></saml:AttributeStatement></div><div><br></div><div>And their configuration defines mail as this:</div><div><br></div><div><div><saml:Attribute Name="mail"></div><div><saml:AttributeValue xmlns:xs="<a rel="nofollow" target="_blank" href="http://www.w3.org/2001/XMLSchema" style="text-decoration: underline; color: rgb(17, 85, 204); outline-width: 0px; outline-style: initial; outline-color: initial; ">http://www.w3.org/ 2001/XMLSchema</a>"
xmlns:xsi="<a rel="nofollow" target="_blank" href="http://www.w3.org/2001/XMLSchema-instance" style="text-decoration: underline; color: rgb(17, 85, 204); outline-width: 0px; outline-style: initial; outline-color: initial; ">http://www.w3.org/ 2001/XMLSchema-instance</a>" xsi:type="xs:string"><a rel="nofollow" ymailto="mailto:cayetano@adobe.com" target="_blank" href="mailto:cayetano@adobe.com" style="text-decoration: underline; color: rgb(17, 85, 204); outline-width: 0px; outline-style: initial; outline-color: initial; ">cayetano@ adobe.com</a></saml: AttributeValue></div><div></saml:Attribute></div></div><div><br></div><div>Now I have mail defined as this (default definition that came with Shib):</div><div><br></div><div> <Attribute name="urn:mace:dir:attribute- def:mail" id="mail"/></div><div><br></div><div>I am going to guess that the mace urn is not going to fly for them on this. For another customer I defined
an attribute for them like this:</div><div><span style="white-space: pre-wrap; "> </span></div><div> <Attribute name="qcmail" nameFormat="urn:oasis:names: tc:SAML:2.0:attrname-format: basic" id="qcmail"> </div><div><span style="white-space: pre-wrap; "> </span><AttributeDecoder xsi:type=" StringAttributeDecoder" caseSensitive="false"/> </div><div><span style="white-space: pre-wrap; "> </span></Attribute></div><div><br></div><div>And that worked fine. I am guessing that I will need to do a similar definition for mail (non MACE) for this to pass through. My questions are:</div><div><br></div><div>Is the MACE name indeed what prevents the attribute from passing? Since they would not match that name value on their side...</div><div><br></div><div>Next question (assuming that the MAC name is not going to fly...):</div><div><br></div><div>If I re-define, let's say, mail for example and I do it
like this:</div><div><br></div><div><div> <Attribute name="mail" nameFormat="urn:oasis:names: tc:SAML:2.0:attrname-format: basic" id="mail"> </div><div><span style="white-space: pre-wrap; "> </span><AttributeDecoder xsi:type=" StringAttributeDecoder" caseSensitive="false"/> </div><div><span style="white-space: pre-wrap; "> </span></Attribute></div><br></div><div>Will the duplicate ID value of 'mail' conflict with the MACE version of the attribute?</div></div></div></div></div></body></html>