

<HTML><BODY><p> Tommy, you are right. I am not adding data connector in resolver Dependency. The uid attribute is defined without any references to the data connector and I supposed connectors were used in v2.<br>So I will need to add data connector as described in example here and add cn to ReturnAttributes list. <br data-mce-bogus="1"></p><p><a href="https://wiki.shibboleth.net/confluence/display/IDP30/LDAPConnector">https://wiki.shibboleth.net/confluence/display/IDP30/LDAPConnector</a><br data-mce-bogus="1"></p><p>Will try tomorow.</p><p>Forgot to point this in first email. I also configured NameId to use cn value in saml-nameid.xml in the shibboleth.SAML2NameIDGenerators list<br><br> <bean parent="shibboleth.SAML2AttributeSourcedGenerator"<br> p:format="urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress"<br> p:attributeSourceIds="#{  {'cn'} }" /></p><p>Reference to issue <a href="https://issues.shibboleth.net/jira/browse/IDP-871">https://issues.shibboleth.net/jira/browse/IDP-871</a></p><p><br></p><blockquote style="border-left:1px solid #0857A6; margin:10px; padding:0 0 0 10px;">

        Вторник, 24 ноября 2015, 15:29 UTC от "Doan, Tommy" <tdoan@smu.edu>:<br>

        <br>

        <div id="">

        
<div class="js-helper js-readmsg-msg">

        
        <div>

                
            <div id="style_14483790230000000150_BODY">I believe Robo is missing the reference to a data connector in his attribute definition. Below is how we use CN in case it helps. <br>

<br>

attribute-resolver.xml<br>

<resolver:AttributeDefinition xsi:type="ad:Simple" id="commonName" sourceAttributeID="cn"><br>

  <resolver:Dependency ref="myLDAP" /><br>

  <resolver:AttributeEncoder xsi:type="enc:SAML1String" name="urn:mace:dir:attribute-def:cn" /><br>

  <resolver:AttributeEncoder xsi:type="enc:SAML2String" name="urn:oid:2.5.4.3" friendlyName="cn" /><br>

</resolver:AttributeDefinition><br>

<br>

attribute-filter.xml<br>

<afp:AttributeFilterPolicy id="releaseExample" ><br>

  <afp:PolicyRequirementRule xsi:type="basic:AttributeRequesterString" value="https://example.edu/shibboleth" /><br>

  <afp:AttributeRule attributeID="commonName"><br>

  <afp:PermitValueRule xsi:type="basic:ANY" /><br>

  </afp:AttributeRule><br> </afp:AttributeFilterPolicy<br>

</div>

            
        </div>


</div>


</div>

</blockquote><p>

<br>

<br>Robo Burned<br></p></BODY></HTML>