<div dir="ltr"><div>If I receive an attribute statement like this:</div><div><br></div><font face="courier new, monospace"><saml:AttributeStatement xmlns:x500="urn:oasis:names:tc:SAML:2.0:profiles:attribute:X500" xmlns:xs="<a href="http://www.w3.org/2001/XMLSchema">http://www.w3.org/2001/XMLSchema</a>" xmlns:xsi="<a href="http://www.w3.org/2001/XMLSchema-instance">http://www.w3.org/2001/XMLSchema-instance</a>"></font><div>
<font face="courier new, monospace"> <saml:Attribute Name="Email" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"></font></div><div><font face="courier new, monospace"> <saml:AttributeValue xsi:type="xs:string"><a href="mailto:jdoe@example.com">jdoe@example.com</a></saml:AttributeValue</font></div>
<div><font face="courier new, monospace"> </saml:Attribute></font></div><div><font face="courier new, monospace"> <saml:Attribute Name="GivenName" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"></font></div>
<div><font face="courier new, monospace"> <saml:AttributeValue xsi:type="xs:string">John</saml:AttributeValue></font></div><div><font face="courier new, monospace"> </saml:Attribute></font></div>
<div><font face="courier new, monospace"> <saml:Attribute Name="UserID" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"></font></div><div><font face="courier new, monospace"> <saml:AttributeValue xsi:type="xs:string">jdoe</saml:AttributeValue></font></div>
<div><font face="courier new, monospace"> </saml:Attribute></font></div><div><font face="courier new, monospace"> <saml:Attribute Name="FamilyName" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"></font></div>
<div><font face="courier new, monospace"> <saml:AttributeValue xsi:type="xs:string">Doe</saml:AttributeValue></font></div><div><font face="courier new, monospace"> </saml:Attribute></font></div>
<div><font face="courier new, monospace"></saml:AttributeStatement><br clear="all"></font><div><br></div><div>I should be able to extract the attributes using a mapping like this right?</div><div><br></div><div><div>
<font face="courier new, monospace"><Attributes xmlns="urn:mace:shibboleth:2.0:attribute-map" xmlns:xsi="<a href="http://www.w3.org/2001/XMLSchema-instance">http://www.w3.org/2001/XMLSchema-instance</a>"></font></div>
<div><font face="courier new, monospace"> <Attribute name="Email" id="Email"/></font></div><div><font face="courier new, monospace"> <Attribute name="GivenName" id="GivenName"/></font></div>
<div><font face="courier new, monospace"> <Attribute name="UserID" id="UserID"/></font></div><div><font face="courier new, monospace"> <Attribute name="FamilyName" id="FamilyName"/></font></div>
<div><font face="courier new, monospace"></Attributes></font></div></div><div><br></div><div>When I start Shibboleth it appears to create the mappings:</div><div><br></div><div><div><font face="courier new, monospace">2014-03-26 02:07:09 INFO Shibboleth.AttributeExtractor.XML : loaded XML resource (D:/nd/shibboleth-sp/etc/shibboleth/attribute-map.xml)</font></div>
<div><font face="courier new, monospace">2014-03-26 02:07:09 INFO Shibboleth.AttributeExtractor.XML : creating mapping for Attribute Email</font></div><div><font face="courier new, monospace">2014-03-26 02:07:09 INFO Shibboleth.AttributeExtractor.XML : creating mapping for Attribute GivenName</font></div>
<div><font face="courier new, monospace">2014-03-26 02:07:09 INFO Shibboleth.AttributeExtractor.XML : creating mapping for Attribute UserID</font></div><div><font face="courier new, monospace">2014-03-26 02:07:09 INFO Shibboleth.AttributeExtractor.XML : creating mapping for Attribute FamilyName</font></div>
</div><div><br></div><div>But when processing the assertion it skips the attributes, claiming they are unmapped:</div><div><br></div><div><div><font face="courier new, monospace">2014-03-26 18:37:13 INFO Shibboleth.AttributeExtractor.XML [1]: skipping unmapped SAML 2.0 Attribute with Name: Email, Format:urn:oasis:names:tc:SAML:2.0:attrname-format:basic</font></div>
<div><font face="courier new, monospace">2014-03-26 18:37:13 INFO Shibboleth.AttributeExtractor.XML [1]: skipping unmapped SAML 2.0 Attribute with Name: GivenName, Format:urn:oasis:names:tc:SAML:2.0:attrname-format:basic</font></div>
<div><font face="courier new, monospace">2014-03-26 18:37:13 INFO Shibboleth.AttributeExtractor.XML [1]: skipping unmapped SAML 2.0 Attribute with Name: UserID, Format:urn:oasis:names:tc:SAML:2.0:attrname-format:basic</font></div>
<div><font face="courier new, monospace">2014-03-26 18:37:13 INFO Shibboleth.AttributeExtractor.XML [1]: skipping unmapped SAML 2.0 Attribute with Name: FamilyName, Format:urn:oasis:names:tc:SAML:2.0:attrname-format:basic</font></div>
</div><div><br></div><div>What am I missing?</div><div><br></div>-- <br><div dir="ltr">Best regards,<br><br>Robert Lowe<br><a href="http://crepuscular.rmlowe.com/" target="_blank">http://crepuscular.rmlowe.com/</a></div>
</div></div>