<div dir="ltr"><div><div>Hello Guru, <br><br></div>Lately I am facing an interesting situation. I am trying to pass three types of ePSA values from my IDP. 1. <a href="mailto:manager@private.com">manager@private.com</a> 2. <a href="mailto:manager@home.private.com">manager@home.private.com</a>. 3. <a href="mailto:staff@private.com">staff@private.com</a>. <br>
<br></div>From my IDP's SAML assertion, I can see IDP is actually passing all ePSA attributes but SP is *not* getting "<a href="mailto:manager@home.private.com">manager@home.private.com</a>" ( #2 ). <br><br>
<i><saml2:Attribute FriendlyName="eduPersonScopedAffiliation" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.9" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><br> <saml2:AttributeValue xmlns:xs="<a href="http://www.w3.org/2001/XMLSchema">http://www.w3.org/2001/XMLSchema</a>" xmlns:xsi="<a href="http://www.w3.org/2001/XMLSchema-instance">http://www.w3.org/2001/XMLSchema-instance</a>" xsi:type="xs:string"><a href="mailto:manager@private.com">manager@private.com</a></saml2:AttributeValue><br>
<saml2:AttributeValue xmlns:xs="<a href="http://www.w3.org/2001/XMLSchema">http://www.w3.org/2001/XMLSchema</a>" xmlns:xsi="<a href="http://www.w3.org/2001/XMLSchema-instance">http://www.w3.org/2001/XMLSchema-instance</a>" xsi:type="xs:string"><a href="mailto:manager@home.private.com">manager@home.private.com</a></saml2:AttributeValue><br>
<saml2:AttributeValue xmlns:xs="<a href="http://www.w3.org/2001/XMLSchema">http://www.w3.org/2001/XMLSchema</a>" xmlns:xsi="<a href="http://www.w3.org/2001/XMLSchema-instance">http://www.w3.org/2001/XMLSchema-instance</a>" xsi:type="xs:string"><a href="mailto:staff@private.com">staff@private.com</a></saml2:AttributeValue><br>
</saml2:Attribute><br><br>... <br>...<br><br>15:07:18.262 - INFO [Shibboleth-Audit:1028] - 20140219T200718Z|urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect|_26a3e24ca5d001a1b868c9bfd822b380|<a href="https://testorg.com/shibboleth-sp|urn:mace:shibboleth:2.0:profiles:saml2:sso|https://org.is.here/idp/shibboleth|urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST|_961fc6881a6e41a9a1db91f418e7535f|zicot|urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport|uid,eduPersonPrincipalName,eduPersonScopedAffiliation,eduPersonTargetedID,|||">https://testorg.com/shibboleth-sp|urn:mace:shibboleth:2.0:profiles:saml2:sso|https://org.is.here/idp/shibboleth|urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST|_961fc6881a6e41a9a1db91f418e7535f|zicot|urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport|uid,eduPersonPrincipalName,eduPersonScopedAffiliation,eduPersonTargetedID,|||</a><br>
<br clear="all"></i><div><div><div><div><div><div><i><br></i></div><div>Is there anything I am missing? Any kind of hint would be helpful. <br></div><div><br>-- <br>Best,<br>Zico
</div></div></div></div></div></div></div>