<div class="gmail_quote">On Tue, Sep 11, 2012 at 12:41 PM, Christopher Bongaarts <span dir="ltr"><<a href="mailto:cab@umn.edu" target="_blank">cab@umn.edu</a>></span> wrote:<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div class="im">
<br>
</div>urn:oid:0.9.2342.19200300.100.1.1 is the SAML 2 name for "uid". I think<br>
employeeNumber is represented as "urn:oid:2.16.840.1.113730.3.1.3" (at<br>
least that's what we use).<br>
<div class="im"><br>
> Also, employeeNumber is nowhere to be seen in the logs.<br>
<br>
</div>Unless they are passing it in the uid field you're not mapping.<br>
<br>
You might find it helpful as well to hit /Shibboleth.sso/Session after<br>
logging in, to see what attributes were received (and you can tweak<br>
shibboleth2.xml to show the values instead of a count if you want).<br></blockquote><div><br></div><div>The "Attributes" section on the "/Shibboleth.sso/Session" page is completely blank.</div><div><br>
</div><div>On Tue, Sep 11, 2012 at 1:10 PM, Cantor, Scott <span dir="ltr"><<a href="mailto:cantor.2@osu.edu" target="_blank">cantor.2@osu.edu</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
<div class="im">Try the tran log.</div></blockquote><div><br></div><div>It shows nothing:</div><div><br></div><div>$ tail /usr/local/shibboleth-2.4.3/var/log/shibboleth/transaction.log -n 100</div><div>2012-09-11 17:25:38 INFO Shibboleth-TRANSACTION [2]: New session (ID: _ba8fd813e8ada4f1812fd66f210983b1) with (applicationId: fresnostate) for principal from (IdP: <a href="https://shib-idp.its.csufresno.edu/idp/shibboleth">https://shib-idp.its.csufresno.edu/idp/shibboleth</a>) at (ClientAddress: 74.61.73.193) with (NameIdentifier: _1b4d5af7d1fe3ab5609832ebb69ad42a) using (Protocol: urn:oasis:names:tc:SAML:2.0:protocol) from (AssertionID: _2c56db141764ed9b43ecacf7da1fc00e)</div>
<div>2012-09-11 17:25:38 INFO Shibboleth-TRANSACTION [2]: Cached the following attributes with session (ID: _ba8fd813e8ada4f1812fd66f210983b1) for (applicationId: fresnostate) {</div><div>2012-09-11 17:25:38 INFO Shibboleth-TRANSACTION [2]: }</div>
<div><br></div><div>Maybe I need to turn up the log level to debug? What setting is that in "shibd.logger"?</div><div><br></div><div>Thanks again.</div></div></div>