I turned the log level to debug. Below is (what I think is) the relevant snippet:<div><br></div><div><div>2012-09-11 17:25:38 DEBUG Shibboleth.SSO.SAML2 [2]: SSO profile processing completed successfully</div><div>2012-09-11 17:25:38 DEBUG Shibboleth.SSO.SAML2 [2]: extracting pushed attributes...</div>
<div>2012-09-11 17:25:38 DEBUG Shibboleth.AttributeExtractor.XML [2]: skipping unmapped NameID with format (urn:oasis:names:tc:SAML:2.0:nameid-format:transient)</div><div>2012-09-11 17:25:38 INFO Shibboleth.AttributeExtractor.XML [2]: skipping unmapped SAML 2.0 Attribute with Name: urn:oid:0.9.2342.19200300.100.1.1</div>
<div>2012-09-11 17:25:38 DEBUG Shibboleth.SSO.SAML2 [2]: resolving attributes...</div><div>2012-09-11 17:25:38 DEBUG Shibboleth.AttributeResolver.Query [2]: found AttributeStatement in input to new session, skipping query</div>
<div>2012-09-11 17:25:38 DEBUG Shibboleth.SessionCache [2]: creating new session</div><div>2012-09-11 17:25:38 DEBUG Shibboleth.SessionCache [2]: storing new session...</div><div><br></div><div>So it looks like they are pushing NameID, which we are not setup to receive. That's fine I guess.</div>
<div><br></div><div>Curious though, I don't see anywhere in the log where they are pushing attributes that we *are* accepting.</div><div><br></div><div>Also, employeeNumber is nowhere to be seen in the logs.</div><div>
<br></div><div>Any ideas? Thanks for the help.</div><br><div class="gmail_quote">On Tue, Sep 11, 2012 at 8:37 AM, Cantor, Scott <span dir="ltr"><<a href="mailto:cantor.2@osu.edu" target="_blank">cantor.2@osu.edu</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class="im">On 9/10/12 11:46 PM, "Nate Klingenstein" <<a href="mailto:ndk@internet2.edu">ndk@internet2.edu</a>> wrote:<br>
><br>
>The easiest thing to do is probably to look at the incoming assertion<br>
>(it'll be in your shibd.log if you have it turned to DEBUG). You'll want<br>
>to check for the employeeNumber attribute in there. If it's present,<br>
>then make sure that the attribute's name<br>
> matches what your attribute-map.xml expects.<br>
<br>
</div>Even without that, every attribute that's unmapped and skipped is logged<br>
anyway.<br>
<br>
-- Scott<br>
<br>
<br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
</blockquote></div><br></div>