<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
Hi,</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
<br>
</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
I am new to SAML and Shibboleth in general and I am trying to learn how it works while trying to demo its’ flexibility as an IdP. I have an SP which accepts the following NameID Formats:</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
<br>
</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
<div><md:NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress</md:NameIDFormat></div>
<div><md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat></div>
<div><md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</md:NameIDFormat></div>
<div><md:NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified</md:NameIDFormat></div>
<div><br>
</div>
</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
I currently have Shibboleth IdP connecting to Active Directory and returning the correct attributes I need (mail and memberOf). The problem is having the mail attribute encode to the above NameID Formats. </div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
<br>
</div>
<div><font face="Calibri,sans-serif">Currently, I have enabled persistent NameID Generator and it seems to be doing the encoding properly as seen below in the idp-process.log. The end result of the mail attribute is a string like "</font><font face="Menlo" size="2">9UoJLXa4TmaVDLUSk+7nh+9xUa4=“
which is what is passed on to my SP as the username and email. The SP cannot read it in this format. Is this the correct result that should be expected? </font></div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
<br>
</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
I have read other archived mails related to NameID but I was not able to resolve my issue or to see if I am on the right track here. Any guidance you can provide would be a great help. I have also attached my attribute-resolver and attribute-filter files for
reference.</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
<br>
</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
Best Regards,</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
Jay</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
<br>
</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
<br>
</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
<p style="margin: 0px; font-size: 11px; font-family: Menlo;">2016-03-24 23:37:50,521 - DEBUG [net.shibboleth.idp.saml.saml2.profile.impl.AddAttributeStatementToAssertion:174] - Profile Action AddAttributeStatementToAssertion: Attempting to encode attribute
mail as a SAML 2 Attribute</p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo;">2016-03-24 23:37:50,522 - DEBUG [net.shibboleth.idp.saml.saml2.profile.impl.AddAttributeStatementToAssertion:188] - Profile Action AddAttributeStatementToAssertion: Encoding attribute mail as a SAML
2 Attribute</p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo;">2016-03-24 23:37:50,523 - DEBUG [net.shibboleth.idp.saml.attribute.encoding.AbstractSAMLAttributeEncoder:154] - Beginning to encode attribute mail</p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo;">2016-03-24 23:37:50,524 - DEBUG [net.shibboleth.idp.saml.attribute.encoding.SAMLEncoderSupport:73] - Encoding value mickey123@vmware.com of attribute mail</p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo;">2016-03-24 23:37:50,525 - DEBUG [net.shibboleth.idp.saml.attribute.encoding.AbstractSAMLAttributeEncoder:191] - Completed encoding 1 values for attribute mail</p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo;">…</p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo;">2016-03-24 23:37:50,548 - WARN [org.opensaml.saml.common.profile.logic.MetadataNameIdentifierFormatStrategy:75] - Ignoring NameIDFormat metadata that includes the 'unspecified' format</p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo;">2016-03-24 23:37:50,549 - DEBUG [net.shibboleth.idp.saml.profile.logic.DefaultNameIdentifierFormatStrategy:100] - Configuration specifies the following formats: [urn:oasis:names:tc:SAML:2.0:nameid-format:persistent,
urn:oasis:names:tc:SAML:2.0:nameid-format:transient, urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress, urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified]</p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo;">2016-03-24 23:37:50,549 - DEBUG [net.shibboleth.idp.saml.profile.logic.DefaultNameIdentifierFormatStrategy:117] - Metadata did not specify any formats, relying on configuration alone</p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo;">2016-03-24 23:37:50,550 - DEBUG [net.shibboleth.idp.saml.nameid.impl.PersistentSAML2NameIDGenerator:205] - Checking for source attribute mail</p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo;"></p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo;">2016-03-24 23:37:50,551 - DEBUG [net.shibboleth.idp.saml.nameid.impl.PersistentSAML2NameIDGenerator:225] - Generating persistent NameID from String-valued attribute mail</p>
</div>
</body>
</html>