Peter, thank you very much for your help! Yes, the eppn value being passed was rwgorrel@uncg.edu... you were right, it was the white space in the idp's metadata causing the problem. I know have a fully flowing eppn! again, thank you very much.<br>
<br>-Rob<br><br><br><div class="gmail_quote">On Thu, May 16, 2013 at 11:27 AM, Peter Schober <span dir="ltr"><<a href="mailto:peter.schober@univie.ac.at" target="_blank">peter.schober@univie.ac.at</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">* Rob Gorrell <<a href="mailto:rwgorrel@uncg.edu">rwgorrel@uncg.edu</a>> [2013-05-16 17:06]:<br>
<div class="im">> I had included urn:mace:dir:attribute-def:displayName but not<br>
> urn:oid:2.16.840.1.113730.3.1.241 in my attribute-map.xml. i'm now mapping<br>
> and displaying displayName<br>
<br>
</div>Great!<br>
<div class="im"><br>
> but still having problems with eppn... so i must<br>
> be related to the scoping you were talking about.<br>
<br>
</div>Yup.<br>
<div class="im"><br>
> this is what I have in my IdP's metadata that i think you were referring<br>
> too:<br>
> <!-- This is a Shibboleth extension to express attribute scope rules. --><br>
> <shibmd:Scope regexp="false"<br>
> xmlns:shibmd="urn:mace:shibboleth:metadata:1.0"><br>
> <a href="http://uncg.edu" target="_blank">uncg.edu</a><br>
> </shibmd:Scope><br>
<br>
</div>If you posted the eppn value your IdP is sending previously I didn't<br>
see it, which makes it hard to say the scope in metadata is correct.<br>
<br>
Assuming the value is <a href="mailto:rwgorrel@uncg.edu">rwgorrel@uncg.edu</a> (or whatever @<a href="http://uncg.edu" target="_blank">uncg.edu</a>) and it<br>
still doesn't work, I'd make sure the shibmd:Scope element's value<br>
does not contain any whitespace:<br>
<div class="im"><br>
<shibmd:Scope regexp="false" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0"><a href="http://uncg.edu" target="_blank">uncg.edu</a></shibmd:Scope><br>
<br>
</div>I.e., make sure there are no line breaks or they are in any place<br>
other than within the string value.<br>
<div class="HOEnZb"><div class="h5">-peter<br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
</div></div></blockquote></div><br><br clear="all"><br>-- <br><div>Robert W. Gorrell<br>Middleware Engineer, Identity and Access Management</div>
<div>University of NC at Greensboro<br>336-334-5954</div>