<div dir="ltr"><div>Here is my current config for the two files that leads to the error:</div><div><br></div>==>> my attribute-resolver.xml has the following:<div><br><div><div> <!-- Name Identifier as email for webex pilot --></div><div><br></div><div> <resolver:AttributeDefinition id="emailNameID" xsi:type="ad:Simple" sourceAttributeID="primaryEmail"></div><div> <resolver:Dependency ref="primaryEmail"/></div><div> <resolver:AttributeEncoder xsi:type="enc:SAML1StringNameIdentifier" nameFormat="urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress"/></div><div> <resolver:AttributeEncoder xsi:type="enc:SAML2StringNameID" nameFormat="urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress"/></div><div> </resolver:AttributeDefinition></div><div><br></div><div><br></div><div> <resolver:AttributeDefinition id="WebExFirstName" xsi:type="Simple" xmlns="urn:mace:shibboleth:2.0:resolver:ad" sourceAttributeID="givenName"></div><div> <resolver:Dependency ref="myLDAP"/></div><div> <resolver:AttributeEncoder xsi:type="SAML2String" xmlns="urn:mace:shibboleth:2.0:attribute:encoder" name="FirstName" friendlyName="FirstName"/></div><div> </resolver:AttributeDefinition></div><div><br></div><div> <resolver:AttributeDefinition id="WebExLastName" xsi:type="Simple" xmlns="urn:mace:shibboleth:2.0:resolver:ad" sourceAttributeID="sn"></div><div> <resolver:Dependency ref="myLDAP"/></div><div> <resolver:AttributeEncoder xsi:type="SAML2String" xmlns="urn:mace:shibboleth:2.0:attribute:encoder" name="LastName" friendlyName="LastName"/></div><div> </resolver:AttributeDefinition></div><div><br></div><div> <resolver:AttributeDefinition xsi:type="ad:Simple" id="WebExEmail" xmlns="urn:mace:shibboleth:2.0:resolver:ad"></div><div> <resolver:Dependency ref="primaryEmail"/></div><div> <resolver:AttributeEncoder xsi:type="enc:SAML2String" xmlns="urn:mace:shibboleth:2.0:attribute:encoder" name="mail" friendlyName="mail"/></div><div> </resolver:AttributeDefinition></div><div><br></div><div> <resolver:AttributeDefinition id="WebExUid" xsi:type="Simple" xmlns="urn:mace:shibboleth:2.0:resolver:ad" sourceAttributeID="sAMAccountName"></div><div> <resolver:Dependency ref="myLDAP"/></div><div> <resolver:AttributeEncoder xsi:type="SAML2String" xmlns="urn:mace:shibboleth:2.0:attribute:encoder" name="uid" friendlyName="uid"/></div><div> </resolver:AttributeDefinition></div><div><br></div><div> <resolver:AttributeDefinition id="SAML_SUBJECT" xsi:type="Simple" xmlns="urn:mace:shibboleth:2.0:resolver:ad" sourceAttributeID="mail"></div><div> <resolver:Dependency ref="myLDAP"/></div><div> <resolver:AttributeEncoder xsi:type="SAML2String" xmlns="urn:mace:shibboleth:2.0:attribute:encoder" name="SAML_SUBJECT" friendlyName="SAML_SUBJECT"/></div><div> </resolver:AttributeDefinition></div></div><div><br></div><div><br></div><div><br></div><div><br></div><div>and</div><div>==>> my attribute-filter.xml contains:</div><div><br></div><div><div> <!-- Release Policy for sjsu webex pilot SP --></div><div><br></div><div> <afp:AttributeFilterPolicy id="<a href="http://www.webex.com">http://www.webex.com</a>"></div><div> <afp:PolicyRequirementRule xsi:type="basic:AttributeRequesterString" value="<a href="http://www.webex.com">http://www.webex.com</a>" /></div><div><br></div><div> <afp:AttributeRule attributeID="emailNameID"></div><div> <afp:PermitValueRule xsi:type="basic:ANY" /></div><div> </afp:AttributeRule></div><div><br></div><div> <afp:AttributeRule attributeID="WebExFirstName"></div><div> <afp:PermitValueRule xsi:type="basic:ANY" /></div><div> </afp:AttributeRule></div><div> <afp:AttributeRule attributeID="WebExLastName"></div><div> <afp:PermitValueRule xsi:type="basic:ANY" /></div><div> </afp:AttributeRule></div><div> <afp:AttributeRule attributeID="WebExEmail"></div><div> <afp:PermitValueRule xsi:type="basic:ANY" /></div><div> </afp:AttributeRule></div><div> <afp:AttributeRule attributeID="WebExUid"></div><div> <afp:PermitValueRule xsi:type="basic:ANY" /></div><div> </afp:AttributeRule></div><div><br></div><div> <afp:AttributeRule attributeID="SAML_SUBJECT"></div><div> <afp:PermitValueRule xsi:type="basic:ANY" /></div><div> </afp:AttributeRule></div><div><br></div><div><br></div><div> </afp:AttributeFilterPolicy></div></div><div><br></div><div><br></div><div><br></div><div><br></div><div class="gmail_extra"><br><div class="gmail_quote">On Tue, Jan 19, 2016 at 12:00 PM, IAM David Bantz <span dir="ltr"><<a href="mailto:dabantz@alaska.edu" target="_blank">dabantz@alaska.edu</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"><div dir="ltr">attribute-resolver.xml to encode an appropriate attribute<div>attribute-filter.xml to release that attribute to the SP</div><div><br></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Tue, Jan 19, 2016 at 10:56 AM, An H Nguyen <span dir="ltr"><<a href="mailto:an.h.nguyen@sjsu.edu" target="_blank">an.h.nguyen@sjsu.edu</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"><div dir="ltr"><div><div>What files do I need to look to correct the name identifier in the format required by the SP?</div></div><div><br></div><div>Thanks</div></div><div class="gmail_extra"><br><div class="gmail_quote"><div><div>On Tue, Jan 19, 2016 at 11:53 AM, IAM David Bantz <span dir="ltr"><<a href="mailto:dabantz@alaska.edu" target="_blank">dabantz@alaska.edu</a>></span> wrote:<br></div></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"><div><div><div dir="ltr"><div class="gmail_extra">It looks like your IdP could not include a name identifier in the format required by the SP.</div><div class="gmail_extra"><br></div><div class="gmail_extra"><div class="gmail_quote">On Tue, Jan 19, 2016 at 10:43 AM, An H Nguyen <span dir="ltr"><<a href="mailto:an.h.nguyen@sjsu.edu" target="_blank">an.h.nguyen@sjsu.edu</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"><div><span><span>2016-01-19</span></span> 11:25:25,405 - DEBUG [net.shibboleth.idp.saml.profile.logic.DefaultNameIdentifierFormatStrategy:100] - Configuration specifies the following formats: [urn:oasis:names:tc:SAML:2.0:nameid-format:emailAddress]</div><div><span><span>2016-01-19</span></span> 11:25:25,405 - DEBUG [net.shibboleth.idp.saml.profile.logic.DefaultNameIdentifierFormatStrategy:121] - Filtered non-metadata-supported formats from configured formats, leaving: [urn:oasis:names:tc:SAML:2.0:nameid-format:emailAddress]</div><div><span><span>2016-01-19</span></span> 11:25:25,405 - DEBUG [net.shibboleth.idp.saml.nameid.impl.LegacyNameIdentifierGenerator:151] - Unable to obtain name identifier from legacy attribute encoders</div></blockquote></div><br><br></div></div>
<br></div></div><span><font color="#888888">--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" target="_blank">users-unsubscribe@shibboleth.net</a><br></font></span></blockquote></div><span><br><br clear="all"><span class=""><font color="#888888"><div><br></div>-- <br><div><div dir="ltr"><div><div dir="ltr">Thanks,<br>- - - - - - - - - - - -<br>An H. Nguyen<br><div>SJSU Computing Systems Analyst<br></div></div></div></div></div>
</font></span></span></div><span class=""><font color="#888888">
<br>--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" target="_blank">users-unsubscribe@shibboleth.net</a><br></font></span></blockquote></div><br></div>
<br>--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br></blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="gmail_signature"><div dir="ltr"><div><div dir="ltr">Thanks,<br>- - - - - - - - - - - -<br>An H. Nguyen<br><div>SJSU Computing Systems Analyst<br></div></div></div></div></div>
</div></div></div>