<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">
Dave,
<div><br>
</div>
<div>You've got three options available to you: pass an attribute that doesn't have the scope, or strip the scope from the received data, or use the scoped usernames in Blackboard. The "right" option will depend on your environment and which data you would
like to use. The scoped attribute decoder doesn't do any manipulation of the values AFAIK, though it may trigger checks if the filters are so configured.</div>
<div><br>
</div>
<div><a href="https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPAttributeDecoder#NativeSPAttributeDecoder-ScopedAttributeDecoder">https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPAttributeDecoder#NativeSPAttributeDecoder-ScopedAttributeDecoder</a></div>
<div><br>
</div>
<div>Take care,</div>
<div>Internet.</div>
<div><br>
</div>
<div>
<div>
<div>On Oct 6, 2014, at 12:20 PM, Dave Vernon <<a href="mailto:dvernon@loyalistcollege.com">dvernon@loyalistcollege.com</a>> wrote:</div>
<br class="Apple-interchange-newline">
<blockquote type="cite">
<div lang="EN-US" link="#0563C1" vlink="#954F72" style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;">
<div class="WordSection1" style="page: WordSection1;">
<div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;">
Hello again Internet,<o:p></o:p></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;">
<o:p> </o:p></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;">
Thanks largely to the help of this group, I now have my Shib SP talking to my Shib IdP, which I am using to protect my Blackboard learn server.<o:p></o:p></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;">
<o:p> </o:p></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;">
I’m down to one final issue that I’ve been working through. My blackboard server has the users created with their username from Active Directory (i.e. the sam account name in windows), so, for example my logon is dvernon<o:p></o:p></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;">
<o:p> </o:p></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;">
I have the following setup in my attribute map on the SP<o:p></o:p></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;">
<o:p> </o:p></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;">
<o:p> </o:p></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;">
<Attribute name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" id="eppn" nameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><o:p></o:p></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;">
<AttributeDecoder xsi:type="ScopedAttributeDecoder"/><o:p></o:p></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;">
</Attribute><o:p></o:p></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;">
<o:p> </o:p></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;">
I am able to login and authenticate to shibboleth, but the authentication fails at blackboard. I’ve found that the username is arriving in the UPN format (i.e.<span class="Apple-converted-space"> </span><a href="mailto:dvernon@ads.loyalistcollege.ca" style="color: rgb(149, 79, 114); text-decoration: underline;">dvernon@ads.loyalistcollege.ca</a>).
(The good news is that everything works if I change the Blackboard userid field to match the upn_<o:p></o:p></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;">
<o:p> </o:p></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;">
I thought that the ScopedAttributeDecoder was supposed to drop the domain portion.. at least that was my understanding from the documentation. I did double check the IdP to make sure that ‘<a href="http://ads.loyalistcollege.ca/" style="color: rgb(149, 79, 114); text-decoration: underline;">ads.loyalistcollege.ca</a>’
was in the md for the scope there.<o:p></o:p></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;">
<o:p> </o:p></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;">
The log on the SP seems to think it’s being scoped<o:p></o:p></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;">
<o:p> </o:p></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;">
2014-10-06 11:15:53 DEBUG Shibboleth.AttributeDecoder.Scoped [1]: decoding ScopedAttribute (eppn) from SAML 2 Attribute (urn:oid:1.3.6.1.4.1.5923.1.1.1.6) with 1 value(s)<o:p></o:p></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;">
<o:p> </o:p></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;">
Any ideas what I’m missing to allow ONLY the username portion to be delivered?<o:p></o:p></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;">
<o:p> </o:p></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;">
Thanks!<o:p></o:p></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;">
<b><span style="font-size: 9pt; font-family: Arial, sans-serif; color: rgb(229, 25, 55);"> </span></b></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;">
<b><span style="font-size: 9pt; font-family: Arial, sans-serif; color: rgb(229, 25, 55);">Dave Vernon<o:p></o:p></span></b></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;">
<b><span style="font-size: 9pt; font-family: Arial, sans-serif; color: rgb(0, 42, 92);">Technology Infrastructure Specialist<o:p></o:p></span></b></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;">
<span style="font-size: 9pt; font-family: Arial, sans-serif;"><a href="mailto:dvernon@loyalistc.on.ca" style="color: rgb(149, 79, 114); text-decoration: underline;"><span style="color: blue;">dvernon@loyalistc.on.ca</span></a><o:p></o:p></span></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;">
<span style="font-size: 9pt; font-family: Arial, sans-serif;"><a href="http://loyalistcollege.com/" style="color: rgb(149, 79, 114); text-decoration: underline;"><span style="color: blue;">loyalistcollege.com</span></a><o:p></o:p></span></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;">
<span style="font-size: 9pt; font-family: Arial, sans-serif;"> </span></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;">
<a href="http://www.loyalistcollege.com/" style="color: rgb(149, 79, 114); text-decoration: underline;"><span style="font-size: 13.5pt; font-family: 'Times New Roman', serif; color: blue; text-decoration: none;"><image001.png></span></a><a href="https://www.facebook.com/loyalistcollege" style="color: rgb(149, 79, 114); text-decoration: underline;"><span style="font-size: 13.5pt; font-family: 'Times New Roman', serif; color: blue; text-decoration: none;"><image002.png></span></a><a href="https://twitter.com/loyalistcollege" style="color: rgb(149, 79, 114); text-decoration: underline;"><span style="font-size: 13.5pt; font-family: 'Times New Roman', serif; color: blue; text-decoration: none;"><image003.png></span></a><o:p></o:p></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;">
<o:p> </o:p></div>
</div>
--<span class="Apple-converted-space"> </span><br>
To unsubscribe from this list send an email to<span class="Apple-converted-space"> </span><a href="mailto:users-unsubscribe@shibboleth.net" style="color: rgb(149, 79, 114); text-decoration: underline;">users-unsubscribe@shibboleth.net</a></div>
</blockquote>
</div>
<br>
</div>
</body>
</html>