<p>That puts me in the right direction, thanks. </p>
<p>This might be a dumb question, but is there a way to tell shib to put all attributes as headers?</p>
<div class="gmail_quote">On Sep 27, 2012 4:17 PM, "Cantor, Scott" <<a href="mailto:cantor.2@osu.edu">cantor.2@osu.edu</a>> wrote:<br type="attribution"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
On 9/27/12 3:26 PM, "Marc Boorshtein" <<a href="mailto:mboorshtein@gmail.com">mboorshtein@gmail.com</a>> wrote:<br>
> <saml2:NameID<br>
>Format="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified">jjackson</s<br>
>aml2:NameID><br>
<br>
Well, that's not mapped by default.<br>
<br>
And...<br>
<br>
> <saml2:Attribute<br>
>Name="urn:mace:dir:attribute-def:eduPersonPrincipalName"><br>
<br>
And that's missing the proper NameFormat for EPPN and isn't named<br>
properly, that's the SAML 1.1 name rather than the OID-formed SAML 2 name.<br>
<br>
<br>
> >jjackson</saml2:AttributeValue><br>
<br>
And lastly it's invalid anyway, since there's no right-hand-side (the<br>
@scope part).<br>
<br>
The SP is quite forgiving about some things, so the incorrect name and<br>
name format aren't actually killing you, but the value being invalid is,<br>
as it logged for you.<br>
<br>
-- Scott<br>
<br>
<br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
</blockquote></div>