<html><body><div style="color:#000; background-color:#fff; font-family:arial, helvetica, sans-serif;font-size:12pt"><div><span>name="<span style="font-weight: bold;">urn:oid:1.3.6.1.4.1.5923.1.1.1.1</span>" id="unscoped-affiliation"<br></span></div><div style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><br></div><div style="font-family: arial, helvetica, sans-serif; font-size: 16px; color: rgb(0, 0, 0); background-color: transparent; font-style: normal;">Use that URI for the name.</div><div style="font-family: arial, helvetica, sans-serif; font-size: 16px; color: rgb(0, 0, 0); background-color: transparent; font-style: normal;"><br></div> <div style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"> <div style="font-family: 'times new roman', 'new york', times, serif; font-size: 12pt;"> <div dir="ltr"> <hr size="1"> <font size="2" face="Arial"> <b><span style="font-weight:bold;">From:</span></b> "Cantor, Scott"
<cantor.2@osu.edu><br> <b><span style="font-weight: bold;">To:</span></b> Shib Users <users@shibboleth.net> <br> <b><span style="font-weight: bold;">Sent:</span></b> Monday, September 9, 2013 7:02 AM<br> <b><span style="font-weight: bold;">Subject:</span></b> Re: Attribute IDs containing Dashes & Resolver Script<br> </font> </div> <div class="y_msg_container"><br>On 9/9/13 12:02 AM, "Patrick Rynhart" <<a ymailto="mailto:P.Rynhart@massey.ac.nz" href="mailto:P.Rynhart@massey.ac.nz">P.Rynhart@massey.ac.nz</a>> wrote:<br><br>>I'm attempting to federate with an SP where they are expecting an<br>>attribute to be called "unscoped-affiliation" (an id containing dashes).<br><br>No, they're not. That's a Shibboleth internal default name for an<br>attribute on the SP, it has nothing to do with what you have to send them.<br><br>> <br>>I am attempting to construct my resolver (in attribute-resolver.xml)
as<br>>follows:<br><br>You are needlessly coupling your IdP's internal naming of attributes with<br>the SP's.<br><br>You can, but you certainly don't need to.<br>><br>>If I remove the dashes (and call my variable unscopedaffiliation) then<br>>things work, but obviously the SP is expecting unscoped-affiliation.<br><br>No, it's not. They're asking for the eduPersonAffiliation attribute, which<br>has a standard URI name, the specifics of which I'm not about to look up,<br>but is present in both SP and IdP files by default as an example.<br><br>-- Scott<br><br><br>--<br>To unsubscribe from this list send an email to <a ymailto="mailto:users-unsubscribe@shibboleth.net" href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br><br><br></div> </div> </div> </div></body></html>