<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<style type="text/css" id="owaParaStyle" style="display: none; ">P {margin-top:0;margin-bottom:0;}</style><style>
<!--
@font-face
{font-family:PMingLiU}
@font-face
{font-family:"Cambria Math"}
@font-face
{font-family:Calibri}
@font-face
{font-family:Garamond}
@font-face
{font-family:Consolas}
@font-face
{font-family:"Anonymous Pro"}
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif"}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline}
p.MsoPlainText, li.MsoPlainText, div.MsoPlainText
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Anonymous Pro"}
span.EmailStyle17
{font-family:"Garamond","serif";
color:windowtext;
font-weight:normal;
font-style:normal}
span.PlainTextChar
{font-family:"Anonymous Pro"}
.MsoChpDefault
{font-family:"Calibri","sans-serif"}
@page WordSection1
{margin:1.0in 1.0in 1.0in 1.0in}
-->
</style>
</head>
<body dir="ltr" fpstyle="1" aria-label="Message body" tabindex="0" id="">
<div name="divtagdefaultwrapper" id="divtagdefaultwrapper" style="font-family: Calibri,Arial,Helvetica,sans-serif; font-size: 12pt; color: #000000; margin: 0">
Griffin,
<div><br>
</div>
<div>I'm not sure why you think something wrong is happening. Everything that I see in your logs appears normal to me except that Microsoft's proprietary UPN is unmapped.</div>
<div><br>
</div>
<div><span class="Apple-style-span" style="color: rgb(40, 40, 40); ">
<p class="MsoNormal" style="margin-top: 0in; margin-bottom: 0.0001pt; margin-right: 0in; margin-left: 0in; font-size: 11pt; font-family: Calibri, sans-serif; ">
<span style="font-family: Garamond, serif; ">2013-10-30 17:29:23 INFO Shibboleth.AttributeExtractor.XML [5]: skipping unmapped SAML 2.0 Attribute with Name: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/upn, Format:urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified</span></p>
<div><span style="font-family: Garamond, serif; "><br>
</span></div>
<div><font class="Apple-style-span" face="Garamond, serif">You will need to add a rule to attribute-map.xml that matches this name and name format and assign it an environment variable.</font></div>
<div><font class="Apple-style-span" face="Garamond, serif"><br>
</font></div>
<div><font class="Apple-style-span" face="Garamond, serif">Thanks,</font></div>
<div><font class="Apple-style-span" face="Garamond, serif">Nate.</font></div>
</span></div>
<div><br>
<div style="color: rgb(40, 40, 40); ">
<hr tabindex="-1" style="display:inline-block; width:98%">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" color="#000000" style="font-size:11pt"><b>From:</b> users-bounces@shibboleth.net <users-bounces@shibboleth.net> on behalf of Griffin Cheng [CLIB] <cscheng@cpce-polyu.edu.hk><br>
<b>Sent:</b> Thursday, October 31, 2013 4:34<br>
<b>To:</b> users@shibboleth.net<br>
<b>Subject:</b> Re: Newbie question: Passing attributes from ADSF through Shibboleth
</font>
<div> </div>
</div>
<div>
<div class="WordSection1">
<p class="MsoNormal"><span style="font-family:"Garamond","serif"">Hello all,</span></p>
<p class="MsoNormal"><span style="font-family:"Garamond","serif""> </span></p>
<p class="MsoNormal"><span style="font-family:"Garamond","serif"">Further to my question below, I check the log and find the followings:</span></p>
<p class="MsoNormal"><span style="font-family:"Garamond","serif""> </span></p>
<p class="MsoNormal"><span style="font-family:"Garamond","serif"">2013-10-30 17:29:23 DEBUG Shibboleth.SSO.SAML2 [5]: extracting pushed attributes...</span></p>
<p class="MsoNormal"><span style="font-family:"Garamond","serif"">2013-10-30 17:29:23 DEBUG Shibboleth.AttributeExtractor.XML [5]: unable to extract attributes, unknown XML object type: samlp:Response</span></p>
<p class="MsoNormal"><span style="font-family:"Garamond","serif"">2013-10-30 17:29:23 DEBUG Shibboleth.AttributeExtractor.XML [5]: unable to extract attributes, unknown XML object type: {urn:oasis:names:tc:SAML:2.0:assertion}AuthnStatement</span></p>
<p class="MsoNormal"><span style="font-family:"Garamond","serif"">2013-10-30 17:29:23 INFO Shibboleth.AttributeExtractor.XML [5]: skipping unmapped SAML 2.0 Attribute with Name: http://schemas.xmlsoap.org/claims/Group, Format:urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified</span></p>
<p class="MsoNormal"><span style="font-family:"Garamond","serif"">2013-10-30 17:29:23 INFO Shibboleth.AttributeExtractor.XML [5]: skipping unmapped SAML 2.0 Attribute with Name: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/upn, Format:urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified</span></p>
<p class="MsoNormal"><span style="font-family:"Garamond","serif"">2013-10-30 17:29:23 DEBUG Shibboleth.AttributeDecoder.String [5]: decoding SimpleAttribute (eppn) from SAML 2 Attribute (urn:oid:1.3.6.1.4.1.5923.1.1.1.6) with 1 value(s)</span></p>
<p class="MsoNormal"><span style="font-family:"Garamond","serif"">2013-10-30 17:29:23 DEBUG Shibboleth.AttributeDecoder.Scoped [5]: decoding ScopedAttribute (ePSA) from SAML 2 Attribute (urn:oid:1.3.6.1.4.1.5923.1.1.1.9) with 1 value(s)</span></p>
<p class="MsoNormal"><span style="font-family:"Garamond","serif"">2013-10-30 17:29:23 DEBUG Shibboleth.AttributeFilter [5]: filtering 2 attribute(s) from (http://adfs.cpce-polyu.edu.hk/adfs/services/trust)</span></p>
<p class="MsoNormal"><span style="font-family:"Garamond","serif"">2013-10-30 17:29:23 DEBUG Shibboleth.AttributeFilter [5]: applying filtering rule(s) for attribute (ePSA) from (http://adfs.cpce-polyu.edu.hk/adfs/services/trust)</span></p>
<p class="MsoNormal"><span style="font-family:"Garamond","serif"">2013-10-30 17:29:23 DEBUG Shibboleth.AttributeFilter [5]: applying filtering rule(s) for attribute (eppn) from (http://adfs.cpce-polyu.edu.hk/adfs/services/trust)</span></p>
<p class="MsoNormal"><span style="font-family:"Garamond","serif"">2013-10-30 17:29:23 DEBUG Shibboleth.SSO.SAML2 [5]: resolving attributes...</span></p>
<p class="MsoNormal"><span style="font-family:"Garamond","serif"">2013-10-30 17:29:23 DEBUG Shibboleth.AttributeResolver.Query [5]: found AttributeStatement in input to new session, skipping query</span></p>
<p class="MsoNormal"><span style="font-family:"Garamond","serif""> </span></p>
<p class="MsoNormal"><span style="font-family:"Garamond","serif"">Whas has gone wrong?</span></p>
<p class="MsoNormal"><span style="font-family:"Garamond","serif""> </span></p>
<p class="MsoNormal"><span style="font-family:"Garamond","serif"; color:black"> </span></p>
<p class="MsoNormal"><span style="font-family:"Garamond","serif"; color:black">Regards,</span></p>
<p class="MsoNormal"><span style="font-family:"Garamond","serif"; color:black"> </span></p>
<p class="MsoNormal"><span style="font-family:"Garamond","serif"; color:black"> </span></p>
<div style="border:none; border-bottom:solid windowtext 1.0pt; padding:0in 0in 1.0pt 0in">
<p class="MsoNormal" style="margin-bottom:12.0pt; border:none; padding:0in"><span style="font-family:"Garamond","serif"; color:black">Griffin CHENG.<br>
Telephone: 3746 0853</span></p>
</div>
<p class="MsoPlainText">* Griffin Cheng [CLIB] <<a href="mailto:cscheng@cpce-polyu.edu.hk">cscheng@cpce-polyu.edu.hk</a>> [2013-10-30 10:59]:</p>
<p class="MsoPlainText">> Hello,</p>
<p class="MsoPlainText">> </p>
<p class="MsoPlainText">> I construct a small "attribute-map.xml" file to extract attributes from the institution's ADSF as follows:</p>
<p class="MsoPlainText">> </p>
<p class="MsoPlainText">> <Attributes xmlns="urn:mace:shibboleth:2.0:attribute-map"
</p>
<p class="MsoPlainText">> xmlns:xsi="<a href="http://www.w3.org/2001/XMLSchema-instance">http://www.w3.org/2001/XMLSchema-instance</a>"></p>
<p class="MsoPlainText">> </p>
<p class="MsoPlainText">> <Attribute name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" id="eppn"></p>
<p class="MsoPlainText">> <AttributeDecoder xsi:type="StringAttributeDecoder"/></p>
<p class="MsoPlainText">> </Attribute></p>
<p class="MsoPlainText">> </p>
<p class="MsoPlainText">> <Attribute name="urn:oid:1.3.6.1.4.1.5923.1.1.1.9" id="ePSA"></p>
<p class="MsoPlainText">> <AttributeDecoder xsi:type="ScopedAttributeDecoder" caseSensitive="false"/></p>
<p class="MsoPlainText">> </Attribute></p>
<p class="MsoPlainText">> </p>
<p class="MsoPlainText">> <Attribute nameFormat="<a href="http://schemas.xmlsoap.org/claims">http://schemas.xmlsoap.org/claims</a>"
</p>
<p class="MsoPlainText">> name="urn:oid:2.5.4.9" id="street"/></p>
<p class="MsoPlainText">> </p>
<p class="MsoPlainText">> </Attributes></p>
<p class="MsoPlainText"> </p>
<p class="MsoPlainText">> I can see the values [eppn] and [ePSA] fine. However, the value of
</p>
<p class="MsoPlainText">> the "street" attribute is missing. The ADSF admin claims that the
</p>
<p class="MsoPlainText">> test account should have the "street" value added.</p>
<p class="MsoPlainText"> </p>
<p class="MsoPlainText">Look at your shibd.log, possibly on DEBUG, it will tell you exactly what it did what all attributes, and why.</p>
<p class="MsoPlainText"> </p>
<p class="MsoPlainText">If I had to guess I would say that the attribute name is wrong, it will likely not be called "urn:oid:2.5.4.9" on the wire if you had to adjust the nameFormat to be something else than URI.</p>
<p class="MsoPlainText"> </p>
<p class="MsoPlainText">> Do I have to add the "street" attribute also to the metadata provider?
</p>
<p class="MsoPlainText">> If so, what should it look like?</p>
<p class="MsoPlainText"> </p>
<p class="MsoPlainText">"Also"? You don't configure attributes in a MetadataProvider at all.</p>
<p class="MsoPlainText">-peter</p>
<p class="MsoNormal"> </p>
</div>
</div>
</div>
</div>
</div>
</body>
</html>