<html><head></head><body><div>Good points Peter. I just got name formatting worked out for our configuration. They wouldn't take the straight displaynameprintable being passed to it, as it then mixed up my first and last name and left a comma in.</div><div><br></div><div>My solution was to make a custom givenName attribute definition just for their givenName, as follows, and set up attribute-filter to use it:</div><div><br></div><div><p class="MsoNormal" style="margin: 0in 0in 0.0001pt; font-family: Calibri, sans-serif; color: rgb(0, 0, 0);"><resolver:AttributeDefinition id="givenNameArcGIS" xsi:type="ad:Template"><o:p></o:p></p><p class="MsoNormal" style="margin: 0in 0in 0.0001pt; font-family: Calibri, sans-serif; color: rgb(0, 0, 0);"> <resolver:Dependency ref="givenName" /><o:p></o:p></p><p class="MsoNormal" style="margin: 0in 0in 0.0001pt; font-family: Calibri, sans-serif; color: rgb(0, 0, 0);"> <resolver:Dependency ref="sn" /><o:p></o:p></p><p class="MsoNormal" style="margin: 0in 0in 0.0001pt; font-family: Calibri, sans-serif; color: rgb(0, 0, 0);"> <resolver:AttributeEncoder xsi:type="enc:SAML1String" name="urn:mace:dir:attribute-def:givenName" /><o:p></o:p></p><p class="MsoNormal" style="margin: 0in 0in 0.0001pt; font-family: Calibri, sans-serif; color: rgb(0, 0, 0);"> <resolver:AttributeEncoder xsi:type="enc:SAML2String" name="urn:oid:2.5.4.42" friendlyName="givenName" /><o:p></o:p></p><p class="MsoNormal" style="margin: 0in 0in 0.0001pt; font-family: Calibri, sans-serif; color: rgb(0, 0, 0);"> <ad:Template><o:p></o:p></p><p class="MsoNormal" style="margin: 0in 0in 0.0001pt; font-family: Calibri, sans-serif; color: rgb(0, 0, 0);"> <![CDATA[<o:p></o:p></p><p class="MsoNormal" style="margin: 0in 0in 0.0001pt; font-family: Calibri, sans-serif; color: rgb(0, 0, 0);"> ${givenName} ${sn}<o:p></o:p></p><p class="MsoNormal" style="margin: 0in 0in 0.0001pt; font-family: Calibri, sans-serif; color: rgb(0, 0, 0);"> ]]><o:p></o:p></p><p class="MsoNormal" style="margin: 0in 0in 0.0001pt; font-family: Calibri, sans-serif; color: rgb(0, 0, 0);"> </ad:Template><o:p></o:p></p><p class="MsoNormal" style="margin: 0in 0in 0.0001pt; font-family: Calibri, sans-serif; color: rgb(0, 0, 0);"> <ad:SourceAttribute>givenName</ad:SourceAttribute><o:p></o:p></p><p class="MsoNormal" style="margin: 0in 0in 0.0001pt; font-family: Calibri, sans-serif; color: rgb(0, 0, 0);"> <ad:SourceAttribute>sn</ad:SourceAttribute><o:p></o:p></p><p style="margin: 0in 0in 0.0001pt; font-family: Calibri, sans-serif; color: rgb(0, 0, 0);"> </resolver:AttributeDefinition></p></div><div><br></div><div>Hope this is helpful Tony.</div><div><br></div><div>Regards,</div><div><br></div><div><br class="Apple-interchange-newline"><span style="font-family: monospace; white-space: pre;">--
Brandon McKean
IT / Systems
Linux Administrator
(540)568-4235</span></div><div><br></div><div><br></div><div>On Fri, 2015-06-26 at 11:54 +0200, Peter Schober wrote:</div><blockquote type="cite"><pre>* Tony Skalski <<a href="mailto:ajs@stolaf.edu">ajs@stolaf.edu</a>> [2015-06-25 22:30]:
<blockquote type="cite">
Are you seeing surname and email address flow into Arcgis.com? We
have been able to get the auth to work but unable to get surname and
email address working.
</blockquote>
Note that according to their docs the attribute names will have to be
changed (from urn:oid:... to basic names), with an accompaning change
to the NameFormat, too (to be correct; not that I think they care).
Also they only claim to support your "full name" in an attribute named
"givenname", so no seperate fields for givenname and surname (i.e.,
they're using givenname when they should be using displayName).
And email addresses can be released as (again: basic) attribute names,
but also need to identify the subject in the NameID.
So plenty of reasons that would not work out of the box with a Shib
configuration, not even one that interoperates successfully with many
other SPs.
"Unable to get ... working" is not a technical error description, of
course, so you'd need to look at the details mentioned above and
previously in this thread.
-peter
</pre></blockquote></body></html>