<div dir="ltr"><div><div>Farzan,<br><br></div>my attribute definitions in attribute-resolver.xml look identical to what you posted, but did you also include that objectGUID is a binary attribute in your myLDAP DataConnecter?<br>
<LDAPProperty name="java.naming.ldap.attributes.binary" value="objectGUID"/><br><br></div>-Rob<br><br></div><div class="gmail_extra"><br><br><div class="gmail_quote">On Mon, Aug 18, 2014 at 9:11 PM, Farzan Qureshi <span dir="ltr"><<a href="mailto:fqureshi@rosmini.school.nz" target="_blank">fqureshi@rosmini.school.nz</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div><div>Hi,<br><br><br></div>I have following in my attribute-resolver.xml:<br><br><!-- Use AD objectGUID for ImmutableID --><br>
<resolver:AttributeDefinition id="ImmutableID" xsi:type="Simple" xmlns="urn:mace:shibboleth:2.0:resolver:ad"<br>
sourceAttributeID="objectGUID"><br> <resolver:Dependency ref="myLDAP" /><br><br> <resolver:AttributeEncoder xsi:type="SAML2StringNameID" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"<br>
nameFormat="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent" /><br> </resolver:AttributeDefinition><br><br><br><!-- mail for Windows Azure AD User ID<br> <resolver:AttributeDefinition id="UserId"<br>
xsi:type="ad:Simple"<br> sourceAttributeID="mail"><br> <resolver:Dependency ref="myLDAP" /><br><resolver:AttributeEncoder xsi:type="enc:SAML2String" name="IDPEmail" friendlyName="UserId" /><br>
</resolver:AttributeDefinition><br>--><br><br><br></div>I am integrating Office365. But when I login I see in idp-process.logs that<br><br>12:39:37.563 - WARN [edu.internet2.middleware.shibboleth.idp.profile.AbstractSAMLProfileHandler:491] - No attribute of principal 'testuser' can be encoded in to a NameIdentifier of required format 'urn:oasis:names:tc:SAML:2.0:nameid-for$<br>
12:39:37.600 - INFO [Shibboleth-Audit:1028] - 20140819T003937Z|urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST|_c8cf79d6-b53d-4714-aefd-506feffb11cb|urn:federation:MicrosoftOnline|urn:mace:shibboleth:2.0:profiles:saml2:sso|<a href="https://idp.ro" target="_blank">https://idp.ro</a>$<br>
12:47:21.649 - INFO [edu.internet2.middleware.shibboleth.common.config.attribute.filtering.ShibbolethAttributeFilteringEngineBeanDefinitionParser:54] - Parsing configuration for attribute filtering engine shibboleth.AttributeFilterEngine<br>
<div><div><br><br><div>An ideas?<span class="HOEnZb"><font color="#888888"><br clear="all"></font></span></div><span class="HOEnZb"><font color="#888888"><div><div><br>-- <br><font face="tahoma, sans-serif"><b>Farzan Qureshi</b> | Network Administrator & Help-desk Support | Rosmini College | (09) 487 0 530</font>
</div></div></font></span></div></div></div><span class="HOEnZb"><font color="#888888">
<br>
<font style="font-family:Verdana" size="1">This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager (<span style="font-weight:bold;font-style:italic"><a href="mailto:admin@rosmini.school.nz" target="_blank">admin@rosmini.school.nz</a></span>). Please note that any views or opinions presented in this email are solely those of the author and do not necessarily represent those of the company. Finally, the recipient should check this email and any attachments for the presence of viruses. <span style="font-weight:bold">Rosmini College</span> accepts no liability for any damage caused by any virus transmitted by this email.</font></font></span><br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br></blockquote></div><br><br clear="all"><br>-- <br><div dir="ltr"><div>Robert W. Gorrell<br>
Systems Architect, Identity and Access Management </div>
<div>University of NC at Greensboro<br><span style="white-space:nowrap">336-334-5954</span><br>PGP Key ID B36DB0CA<br></div></div>
</div>