<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 14 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:PMingLiU;
panose-1:2 2 5 0 0 0 0 0 0 0;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Garamond;
panose-1:2 2 4 4 3 3 1 1 8 3;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
@font-face
{font-family:"\@PMingLiU";
panose-1:2 2 5 0 0 0 0 0 0 0;}
@font-face
{font-family:"Anonymous Pro";
panose-1:2 6 6 9 3 2 2 0 5 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.MsoPlainText, li.MsoPlainText, div.MsoPlainText
{mso-style-priority:99;
mso-style-link:"Plain Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Anonymous Pro";}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Garamond","serif";
color:windowtext;
font-weight:normal;
font-style:normal;}
span.PlainTextChar
{mso-style-name:"Plain Text Char";
mso-style-priority:99;
mso-style-link:"Plain Text";
font-family:"Anonymous Pro";}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link=blue vlink=purple><div class=WordSection1><p class=MsoNormal><span style='font-family:"Garamond","serif"'>Hello all,<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Garamond","serif"'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:"Garamond","serif"'>Further to my question below, I check the log and find the followings:<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Garamond","serif"'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:"Garamond","serif"'>2013-10-30 17:29:23 DEBUG Shibboleth.SSO.SAML2 [5]: extracting pushed attributes...<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Garamond","serif"'>2013-10-30 17:29:23 DEBUG Shibboleth.AttributeExtractor.XML [5]: unable to extract attributes, unknown XML object type: samlp:Response<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Garamond","serif"'>2013-10-30 17:29:23 DEBUG Shibboleth.AttributeExtractor.XML [5]: unable to extract attributes, unknown XML object type: {urn:oasis:names:tc:SAML:2.0:assertion}AuthnStatement<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Garamond","serif"'>2013-10-30 17:29:23 INFO Shibboleth.AttributeExtractor.XML [5]: skipping unmapped SAML 2.0 Attribute with Name: http://schemas.xmlsoap.org/claims/Group, Format:urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Garamond","serif"'>2013-10-30 17:29:23 INFO Shibboleth.AttributeExtractor.XML [5]: skipping unmapped SAML 2.0 Attribute with Name: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/upn, Format:urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Garamond","serif"'>2013-10-30 17:29:23 DEBUG Shibboleth.AttributeDecoder.String [5]: decoding SimpleAttribute (eppn) from SAML 2 Attribute (urn:oid:1.3.6.1.4.1.5923.1.1.1.6) with 1 value(s)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Garamond","serif"'>2013-10-30 17:29:23 DEBUG Shibboleth.AttributeDecoder.Scoped [5]: decoding ScopedAttribute (ePSA) from SAML 2 Attribute (urn:oid:1.3.6.1.4.1.5923.1.1.1.9) with 1 value(s)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Garamond","serif"'>2013-10-30 17:29:23 DEBUG Shibboleth.AttributeFilter [5]: filtering 2 attribute(s) from (http://adfs.cpce-polyu.edu.hk/adfs/services/trust)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Garamond","serif"'>2013-10-30 17:29:23 DEBUG Shibboleth.AttributeFilter [5]: applying filtering rule(s) for attribute (ePSA) from (http://adfs.cpce-polyu.edu.hk/adfs/services/trust)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Garamond","serif"'>2013-10-30 17:29:23 DEBUG Shibboleth.AttributeFilter [5]: applying filtering rule(s) for attribute (eppn) from (http://adfs.cpce-polyu.edu.hk/adfs/services/trust)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Garamond","serif"'>2013-10-30 17:29:23 DEBUG Shibboleth.SSO.SAML2 [5]: resolving attributes...<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Garamond","serif"'>2013-10-30 17:29:23 DEBUG Shibboleth.AttributeResolver.Query [5]: found AttributeStatement in input to new session, skipping query<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Garamond","serif"'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:"Garamond","serif"'>Whas has gone wrong?<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Garamond","serif"'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:"Garamond","serif";color:black'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:"Garamond","serif";color:black'>Regards,<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Garamond","serif";color:black'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:"Garamond","serif";color:black'><o:p> </o:p></span></p><div style='mso-element:para-border-div;border:none;border-bottom:solid windowtext 1.0pt;padding:0in 0in 1.0pt 0in'><p class=MsoNormal style='margin-bottom:12.0pt;border:none;padding:0in'><span style='font-family:"Garamond","serif";color:black'>Griffin CHENG.<br>Telephone: 3746 0853<o:p></o:p></span></p></div><p class=MsoPlainText>* Griffin Cheng [CLIB] <<a href="mailto:cscheng@cpce-polyu.edu.hk">cscheng@cpce-polyu.edu.hk</a>> [2013-10-30 10:59]:<o:p></o:p></p><p class=MsoPlainText>> Hello,<o:p></o:p></p><p class=MsoPlainText>> <o:p></o:p></p><p class=MsoPlainText>> I construct a small "attribute-map.xml" file to extract attributes from the institution's ADSF as follows:<o:p></o:p></p><p class=MsoPlainText>> <o:p></o:p></p><p class=MsoPlainText>> <Attributes xmlns="urn:mace:shibboleth:2.0:attribute-map" <o:p></o:p></p><p class=MsoPlainText>> xmlns:xsi="<a href="http://www.w3.org/2001/XMLSchema-instance">http://www.w3.org/2001/XMLSchema-instance</a>"><o:p></o:p></p><p class=MsoPlainText>> <o:p></o:p></p><p class=MsoPlainText>> <Attribute name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" id="eppn"><o:p></o:p></p><p class=MsoPlainText>> <AttributeDecoder xsi:type="StringAttributeDecoder"/><o:p></o:p></p><p class=MsoPlainText>> </Attribute><o:p></o:p></p><p class=MsoPlainText>> <o:p></o:p></p><p class=MsoPlainText>> <Attribute name="urn:oid:1.3.6.1.4.1.5923.1.1.1.9" id="ePSA"><o:p></o:p></p><p class=MsoPlainText>> <AttributeDecoder xsi:type="ScopedAttributeDecoder" caseSensitive="false"/><o:p></o:p></p><p class=MsoPlainText>> </Attribute><o:p></o:p></p><p class=MsoPlainText>> <o:p></o:p></p><p class=MsoPlainText>> <Attribute nameFormat="<a href="http://schemas.xmlsoap.org/claims">http://schemas.xmlsoap.org/claims</a>" <o:p></o:p></p><p class=MsoPlainText>> name="urn:oid:2.5.4.9" id="street"/><o:p></o:p></p><p class=MsoPlainText>> <o:p></o:p></p><p class=MsoPlainText>> </Attributes><o:p></o:p></p><p class=MsoPlainText><o:p> </o:p></p><p class=MsoPlainText>> I can see the values [eppn] and [ePSA] fine. However, the value of <o:p></o:p></p><p class=MsoPlainText>> the "street" attribute is missing. The ADSF admin claims that the <o:p></o:p></p><p class=MsoPlainText>> test account should have the "street" value added.<o:p></o:p></p><p class=MsoPlainText><o:p> </o:p></p><p class=MsoPlainText>Look at your shibd.log, possibly on DEBUG, it will tell you exactly what it did what all attributes, and why.<o:p></o:p></p><p class=MsoPlainText><o:p> </o:p></p><p class=MsoPlainText>If I had to guess I would say that the attribute name is wrong, it will likely not be called "urn:oid:2.5.4.9" on the wire if you had to adjust the nameFormat to be something else than URI.<o:p></o:p></p><p class=MsoPlainText><o:p> </o:p></p><p class=MsoPlainText>> Do I have to add the "street" attribute also to the metadata provider? <o:p></o:p></p><p class=MsoPlainText>> If so, what should it look like?<o:p></o:p></p><p class=MsoPlainText><o:p> </o:p></p><p class=MsoPlainText>"Also"? You don't configure attributes in a MetadataProvider at all.<o:p></o:p></p><p class=MsoPlainText>-peter<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p></div></body></html>