<div dir="ltr">Hi all,<div><br></div><div>how I can force Shibboleth to send response with assertions that I have defined in <i>attribute-resolver.xml</i>. I would like to send back sn, cn, uid and one custom field that I have defined in LDAP. I am using LDAP connector. When my SP initiate FSSO, I am redirected to the Shibboleth login page. User is authenticated. SAML response is send back. But it is without assertions thta I am expecting. What is wrong ?</div>
<div><br></div><div><b>In attribute-resolver.xml, here are defined attributes :</b></div><div><br></div><div><div><span style="white-space:pre"> </span><resolver:AttributeDefinition xsi:type="ad:Simple" id="uid" sourceAttributeID="userid"></div>
<div> <resolver:Dependency ref="myLDAP" /></div><div> <resolver:AttributeEncoder xsi:type="enc:SAML1String" name="urn:mace:dir:attribute-def:uid" /></div><div> <resolver:AttributeEncoder xsi:type="enc:SAML2String" name="urn:oid:0.9.2342.19200300.100.1.1" friendlyName="uid" /></div>
<div> </resolver:AttributeDefinition></div><div><span style="white-space:pre"> </span><br></div><div><span class="" style="white-space:pre"> </span><resolver:AttributeDefinition xsi:type="ad:Simple" id="cpqd" sourceAttributeID="cpqd"></div>
<div> <resolver:Dependency ref="myLDAP" /></div><div><span class="" style="white-space:pre"> </span><resolver:AttributeEncoder xsi:type="enc:SAML1String" name="cpqd" /></div>
<div><span class="" style="white-space:pre"> </span><resolver:AttributeEncoder xsi:type="enc:SAML2String" name="cpqd" /></div><div> </resolver:AttributeDefinition></div><div><br></div><div style>
<b>In attribute-filter.xml I have the following lines :</b></div><div style><b><br></b></div><div style><div> <!-- Release the transient ID, espa & eptid to anyone --></div><div> <afp:AttributeFilterPolicy id="releaseToAnyone"></div>
<div> <afp:PolicyRequirementRule xsi:type="basic:ANY"/></div><div><br></div><div><span class="" style="white-space:pre"> </span><!-- Transient --></div><div> <afp:AttributeRule attributeID="transientId"></div>
<div> <afp:PermitValueRule xsi:type="basic:ANY"/></div><div> </afp:AttributeRule></div><div><span class="" style="white-space:pre"> </span></div><div><span class="" style="white-space:pre"> </span><!-- uid to ANY --></div>
<div><span class="" style="white-space:pre"> </span><afp:AttributeRule attributeID="uid"></div><div> <afp:PermitValueRule xsi:type="basic:ANY" /></div><div> </afp:AttributeRule></div>
<div><span class="" style="white-space:pre"> </span></div><div><span class="" style="white-space:pre"> </span><afp:AttributeRule attributeID="cpqd"></div><div> <afp:PermitValueRule xsi:type="basic:ANY" /></div>
<div> </afp:AttributeRule></div><div><br></div><div> </afp:AttributeFilterPolicy></div></div><div><br></div> </div><div style>And I am not getting these attributes. I am missing something ?</div><div style>
<br></div><div style>One note. In my LDAP names are the same and all are lowercase. I have tried also with <strong>lowercaseAttributeNames </strong> in LDAP connector.</div><div style><br></div><div style>Thank you,</div>
<div style>Rastko</div><div>
<br></div></div>
<br>
<a href="http://www.calliduscloudconnections.com/" rel="nofollow" style="color:rgb(0,51,204);text-decoration:underline;background-image:none;background-color:rgb(255,255,255);border-bottom-style:none;font-family:Arial,Verdana,sans-serif;font-size:13px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:21px;text-align:left;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-repeat:initial initial" target="_blank"><img alt="CallidusCloud Connections" src="https://sites.google.com/a/calliduscloud.com/callidus-signature-site/_/rsrc/1355957960088/c3-signature-addition/c3_sig_2.png" style="border:0px;padding:0px" border="0"></a><span style="color:rgb(68,68,68);font-family:Arial,Verdana,sans-serif;font-size:13px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:21px;text-align:left;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);display:inline!important;float:none"> CallidusCloud Connections, Las Vegas, May 5-7, 2013,<span> </span></span><font style="font-family:Arial,Verdana,sans-serif;font-size:13px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:21px;text-align:left;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255)" color="#ff9900"><a href="http://www.calliduscloudconnections.com/register.html" rel="nofollow" style="color:rgb(0,51,204);text-decoration:underline" target="_blank">REGISTER NOW</a></font>