<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<style>
<!--
@font-face
{font-family:"Cambria Math"}
@font-face
{font-family:Calibri}
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif"}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline}
span.EmailStyle17
{font-family:"Calibri","sans-serif";
color:windowtext}
.MsoChpDefault
{font-family:"Calibri","sans-serif"}
@page WordSection1
{margin:72.0pt 72.0pt 72.0pt 72.0pt}
div.WordSection1
{}
-->
</style>
</head>
<body lang="EN-GB" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:16.0pt">First thanks to everyone who helped with my Windows AD authentication. It is working now.</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt"> </span></p>
<p class="MsoNormal"><span style="font-size:16.0pt">I'm trying to send an attribute tt testshib two but I’m not sure if it's working. I thought it would appear in the</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt"> </span></p>
<p class="MsoNormal"><span style="font-size:16.0pt">Shibboleth-protected TestShib Content</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt"> </span></p>
<p class="MsoNormal"><span style="font-size:16.0pt">But it doesn't. The attribute is defined in attribute-resolver.xml:</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt"> </span></p>
<p class="MsoNormal"><span style="font-size:16.0pt">Shibboleth-protected TestShib Content</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt"> </span></p>
<p class="MsoNormal"><span style="font-size:16.0pt"> <resolver:AttributeDefinition</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt"> id="eduPersonScopedAffiliation"</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt"> xsi:type="Script"</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt"> xmlns="urn:mace:shibboleth:2.0:resolver:ad" ></span></p>
<p class="MsoNormal"><span style="font-size:16.0pt"> </span></p>
<p class="MsoNormal"><span style="font-size:16.0pt"> <resolver:Dependency ref="myLDAP" /></span></p>
<p class="MsoNormal"><span style="font-size:16.0pt"> </span></p>
<p class="MsoNormal"><span style="font-size:16.0pt"> <resolver:AttributeEncoder</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt"> xsi:type="SAML1String"</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt"> xmlns="urn:mace:shibboleth:2.0:attribute:encoder"</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt"> name="urn:mace:dir:attribute-def:eduPersonScopedAffiliat</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt">ion"/></span></p>
<p class="MsoNormal"><span style="font-size:16.0pt"> </span></p>
<p class="MsoNormal"><span style="font-size:16.0pt"> <resolver:AttributeEncoder</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt"> xsi:type="SAML2String"</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt"> xmlns="urn:mace:shibboleth:2.0:attribute:encoder"</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt"> name="urn:oid:1.3.6.1.4.1.5923.1.1.1.1"</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt"> friendlyName="eduPersonScopedAffiliation"/></span></p>
<p class="MsoNormal"><span style="font-size:16.0pt"> <Script></span></p>
<p class="MsoNormal"><span style="font-size:16.0pt"> <![CDATA[
</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt"> importPackage(Packages.edu.internet2.middleware.</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt">shibboleth.common.attribute.provider);</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt"> eduPersonScopedAffiliation = new BasicAttribute(</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt">"eduPersonScopedAffiliation");</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt"> dn = distinguishedName.getValues().get(0).toLowe</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt">rCase();</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt"> if (dn.contains("ou=staff")) {</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt"> eduPersonScopedAffiliation.getValues().a</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt">dd("staff");</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt"> } else if (dn.contains("ou=student")) {</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt"> eduPersonScopedAffiliation.getValues().a</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt">dd("student");</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt"> } else {</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt"> eduPersonScopedAffiliation.getValues().a</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt">dd("member");</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt"> }</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt"> ]]></span></p>
<p class="MsoNormal"><span style="font-size:16.0pt"> </Script></span></p>
<p class="MsoNormal"><span style="font-size:16.0pt"> </resolver:AttributeDefinition></span></p>
<p class="MsoNormal"><span style="font-size:16.0pt"> </span></p>
<p class="MsoNormal"><span style="font-size:16.0pt">And in attribute-filter.xml:</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt"> </span></p>
<p class="MsoNormal"><span style="font-size:16.0pt"> </span></p>
<p class="MsoNormal"><span style="font-size:16.0pt"> <afp:AttributeFilterPolicy id="releaseBasicAttributesToAnyone"></span></p>
<p class="MsoNormal"><span style="font-size:16.0pt"> <afp:PolicyRequirementRule xsi:type="basic:ANY" /></span></p>
<p class="MsoNormal"><span style="font-size:16.0pt"> </span></p>
<p class="MsoNormal"><span style="font-size:16.0pt"> <afp:AttributeRule attributeID="eduPersonScopedAffiliation"></span></p>
<p class="MsoNormal"><span style="font-size:16.0pt"> <afp:PermitValueRule xsi:type="basic:ANY" /></span></p>
<p class="MsoNormal"><span style="font-size:16.0pt"> </afp:AttributeRule></span></p>
<p class="MsoNormal"><span style="font-size:16.0pt"> </span></p>
<p class="MsoNormal"><span style="font-size:16.0pt"> </afp:AttributeFilterPolicy></span></p>
<p class="MsoNormal"><span style="font-size:16.0pt"> </span></p>
<p class="MsoNormal"><span style="font-size:16.0pt"> </span></p>
<p class="MsoNormal"><span style="font-size:16.0pt">But in the idp-process.log is says Removing attribute eduPersonScopedAffiliation ?</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt"> </span></p>
<p class="MsoNormal"><span style="font-size:16.0pt">ring.provider.ShibbolethAttributeFilteringEngine:109] - Attribute eduPersonScopedAffiliation has 1 values after filtering</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt">16:02:21.377 - DEBUG [edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:114] - Filtered attributes for
</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt">principal cmsdwynn. The following attributes remain: [transientId, eduPersonScopedAffiliation]</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt">16:02:21.378 - DEBUG [edu.internet2.middleware.shibboleth.common.attribute.provi</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt">der.ShibbolethSAML2AttributeAuthority:215] - Encoded attribute eduPersonScopedAffiliation with encoder of type edu.internet2.middleware.shibboleth.common.attribute.encoding.provider.SAML2StringAttributeEncoder</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt">16:02:21.379 - DEBUG [edu.internet2.middleware.shibboleth.idp.profile.AbstractSA</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt">MLProfileHandler:528] - Removing attribute eduPersonScopedAffiliation, it can not be encoded via edu.internet2.middleware.shibboleth.common.attribute.encoding.SAML2NameIDEncoder</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt"> <saml2:Attribute FriendlyName="eduPersonScopedAffiliation" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.1" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"></span></p>
<p class="MsoNormal"><span style="font-size:16.0pt">16:02:21.425 - INFO [Shibboleth-Audit:989] - 20121120T160221Z|urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect|_17f555f56a5a1d4c0f8002ec042c9314|https://sp.testshib.org/shibboleth-sp|urn:mace:shibboleth:2.0:profiles:saml2:sso|https://java.cms.livjm.ac.uk/idp/shibboleth|urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST|_347d7854e5a6550ac3fea58c03741402|cmsdwynn|urn:oasis:names:tc:SAML:2.0:ac:classes</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt">:PasswordProtectedTransport|transientId,eduPersonScopedAffiliation,|_72da3968a255614eb5d7a94fb808c4de||</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt"> </span></p>
<p class="MsoNormal"><span style="font-size:16.0pt"> </span></p>
<p class="MsoNormal"><span style="font-size:16.0pt"> </span></p>
<p class="MsoNormal"><span style="font-size:16.0pt"> </span></p>
<p class="MsoNormal"><span style="font-size:16.0pt"> </span></p>
<p class="MsoNormal"><span style="">Dave Wynne</span></p>
<p class="MsoNormal"><span style="">Senior Technical Officer</span></p>
<p class="MsoNormal"><span style="">School Of Computing & Maths</span></p>
<p class="MsoNormal"><span style="">James Parsons Building</span></p>
<p class="MsoNormal"><span style="">Liverpool John Moores University</span></p>
<p class="MsoNormal"><span style="">Byrom Street</span></p>
<p class="MsoNormal"><span style="">Liverpool L3 3AF</span></p>
<p class="MsoNormal"> </p>
</div>
<br>
<hr>
<font face="Tahoma" size="2"><b><i>Important Notice:<i></b><i> the information in this email and any attachments is for the sole use of the intended recipient(s). If you are not an intended recipient, or a person responsible for delivering it to an intended
recipient, you should delete it from your system immediately without disclosing its contents elsewhere and advise the sender by returning the email or by telephoning a number contained in the body of the email. No responsibility is accepted for loss or damage
arising from viruses or changes made to this message after it was sent. The views contained in this email are those of the author and not necessarily those of Liverpool John Moores University.<i></font>
</i></i></i></i>
</body>
</html>