<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 12pt;
font-family:Calibri
}
--></style></head>
<body class='hmmessage'><div dir='ltr'>Hi<div><br></div><div>So, with Scott's help, I've got Shibboleth configured correctly - up to a point. I'm using IIS.</div><div><br></div><div>I have a secure URL, and when I access it, Shibboleth redirects me to me IDP which is my case is OKTA. I do the login with OKTA and then I come back to me website at the right point and I can see there is a SAML response (encrypted).</div><div><br></div><div>What I have not been able top work out today is how to configure attribute-map.xml</div><div><br></div><div>This is what OKTA has in terms of attributes which you add to the response.</div><div><br></div><div>AttributeName|Value|Namespace</div><div><br></div><div>and their example is:</div><div><br></div><div>role|ENG|urn:oasis:names:tc:SAML:2.0:attrname-format:uri</div><div><br></div><div>So I have entered the following line into attribute-map.</div><div><br></div><div><div><Attribute name="role" id="role" nameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" /></div></div><div><br></div><div>So I'm expecting that</div><div><br></div><div>Response.Write(Request("HTTP_ROLE"));</div><div><br></div><div>on the page my IDP returns me to <span style="font-size: 12pt;">will give me 'ENG' but it gives me nothing.</span></div><div><br></div><div>There is clearly something wrong I'm doing here, but I'd appreciate some pointers.</div><div><br></div><div>Cheers,</div><div><br></div> </div></body>
</html>