<div dir="ltr">Hello Experts,<div><br></div><div>How do i configure Name attribute as "username" instead of <span style="font-size:12.8px">Name="urn:oid:0.9.2342.</span><span style="font-size:12.8px">19200300.100.1.1" in shibboleth IDP 3.2.1?</span><div><span style="font-size:12.8px"><br></span></div><div><span style="font-size:12.8px">Thanks,</span></div><div><span style="font-size:12.8px">Muthu</span></div><div><span style="font-size:12.8px"><br></span></div></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Mon, Jun 27, 2016 at 2:19 PM, Muthuraman Sethuraman Sethuraman (US - Advisory) <span dir="ltr"><<a href="mailto:muthuraman.sethuraman@pwc.com" target="_blank">muthuraman.sethuraman@pwc.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div>I have configured the IDP to release uid and email.<br></div><div><div>But on the SP side, i keep getting this error...</div><div>Please let me know how do i overcome this?</div><div><br></div><div><div><saml2:AttributeStatement></div><div><saml2:Attribute FriendlyName="uid" Name="urn:oid:0.9.2342.19200300.100.1.1" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml2:AttributeValue>skulkarni</saml2:AttributeValue></div><div></saml2:Attribute></div><div><saml2:Attribute FriendlyName="mail" Name="urn:oid:0.9.2342.19200300.100.1.3" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml2:AttributeValue><a href="mailto:skulkarni@example.org" target="_blank">skulkarni@example.org</a></saml2:AttributeValue></div><div></saml2:Attribute></div><div></saml2:AttributeStatement></div><div></saml2:Assertion></saml2p:Response></div><div><br></div><div>2016-06-27 03:52:33.562 -0400 (,,,) catalina-exec-3 : DEBUG com.tableausoftware.domain.user.saml.SAMLExtendedProcessingFilter - Found XSAny attribute: urn:oid:0.9.2342.19200300.100.1.1 with value of: skulkarni</div><div>2016-06-27 03:52:33.562 -0400 (,,,) catalina-exec-3 : DEBUG com.tableausoftware.domain.user.saml.SAMLExtendedProcessingFilter - Found XSAny attribute: urn:oid:0.9.2342.19200300.100.1.3 with value of: <a href="mailto:skulkarni@example.org" target="_blank">skulkarni@example.org</a></div><div>2016-06-27 03:52:33.562 -0400 (,,,) catalina-exec-3 : DEBUG com.tableausoftware.domain.user.saml.SAMLExtendedProcessingFilter - SAMLResponse attributes: {urn:oid:0.9.2342.19200300.100.1.3=<a href="mailto:skulkarni@example.org" target="_blank">skulkarni@example.org</a>, urn:oid:0.9.2342.19200300.100.1.1=skulkarni}</div><div>2016-06-27 03:52:33.562 -0400 (,,,) catalina-exec-3 : ERROR com.tableausoftware.domain.user.saml.SAMLExtendedProcessingFilter - SAML Authentication Failed, please contact the administrator.</div><div>org.springframework.security.authentication.AuthenticationServiceException: Incoming SAML message has no valid value for username attribute. Please verify ServiceProvider configuration in Identity Provider.</div><div><span style="white-space:pre-wrap"> </span>at com.tableausoftware.domain.user.saml.SAMLExtendedProcessingFilter.getUser(SAMLExtendedProcessingFilter.java:425)</div><div><span style="white-space:pre-wrap"> </span>at com.tableausoftware.domain.user.saml.SAMLExtendedProcessingFilter.handleSuccess(SAMLExtendedProcessingFilter.java:214)</div><div><span style="white-space:pre-wrap"> </span>at com.tableausoftware.domain.user.saml.SAMLExtendedProcessingFilter.attemptAuthentication(SAMLExtendedProcessingFilter.java:170)</div><div><span style="white-space:pre-wrap"> </span>at org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter.doFilter(AbstractAuthenticationProcessingFilter.java:211)</div><div><span style="white-space:pre-wrap"> </span>at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:342)</div><div><span style="white-space:pre-wrap"> </span>at org.springframework.security.web.FilterChainProxy.doFilterInternal(FilterChainProxy.java:192)</div><div><span style="white-space:pre-wrap"> </span>at org.springframework.security.web.FilterChainProxy.doFilter(FilterChainProxy.java:166)</div><div><span style="white-space:pre-wrap"> </span>at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:342)</div><div><span style="white-space:pre-wrap"> </span>at org.springframework.security.web.context.request.async.WebAsyncManagerIntegrationFilter.doFilterInternal(WebAsyncManagerIntegrationFilter.java:50)</div><div><span style="white-space:pre-wrap"> </span>at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:107)</div><div><span style="white-space:pre-wrap"> </span>at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:342)</div><div><span style="white-space:pre-wrap"> </span>at org.springframework.security.web.context.SecurityContextPersistenceFilter.doFilter(SecurityContextPersistenceFilter.java:87)</div><div><span style="white-space:pre-wrap"> </span>at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:342)</div><div><span style="white-space:pre-wrap"> </span>at org.springframework.security.web.FilterChainProxy.doFilterInternal(FilterChainProxy.java:192)</div><div><span style="white-space:pre-wrap"> </span>at org.springframework.security.web.FilterChainProxy.doFilter(FilterChainProxy.java:160)</div><div><span style="white-space:pre-wrap"> </span>at org.springframework.web.filter.DelegatingFilterProxy.invokeDelegate(DelegatingFilterProxy.java:344)</div><div><span style="white-space:pre-wrap"> </span>at org.springframework.web.filter.DelegatingFilterProxy.doFilter(DelegatingFilterProxy.java:261)</div><div><span style="white-space:pre-wrap"> </span>at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:241)</div><div><span style="white-space:pre-wrap"> </span>at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208)</div><div><span style="white-space:pre-wrap"> </span>at org.springframework.web.filter.CharacterEncodingFilter.doFilterInternal(CharacterEncodingFilter.java:85)</div><div><span style="white-space:pre-wrap"> </span>at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:107)</div><div><span style="white-space:pre-wrap"> </span>at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:241)</div><div><span style="white-space:pre-wrap"> </span>at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208)</div><div><span style="white-space:pre-wrap"> </span>at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:220)</div><div><span style="white-space:pre-wrap"> </span>at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:122)</div><div><span style="white-space:pre-wrap"> </span>at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:503)</div><div><span style="white-space:pre-wrap"> </span>at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:170)</div><div><span style="white-space:pre-wrap"> </span>at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:103)</div><div><span style="white-space:pre-wrap"> </span>at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:116)</div><div><span style="white-space:pre-wrap"> </span>at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:421)</div><div><span style="white-space:pre-wrap"> </span>at org.apache.coyote.http11.AbstractHttp11Processor.process(AbstractHttp11Processor.java:1070)</div><div><span style="white-space:pre-wrap"> </span>at org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.process(AbstractProtocol.java:611)</div><div><span style="white-space:pre-wrap"> </span>at org.apache.tomcat.util.net.AprEndpoint$SocketProcessor.doRun(AprEndpoint.java:2466)</div><div><span style="white-space:pre-wrap"> </span>at org.apache.tomcat.util.net.AprEndpoint$SocketProcessor.run(AprEndpoint.java:2455)</div><div><span style="white-space:pre-wrap"> </span>at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)</div><div><span style="white-space:pre-wrap"> </span>at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)</div><div><span style="white-space:pre-wrap"> </span>at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)</div><div><span style="white-space:pre-wrap"> </span>at java.lang.Thread.run(Thread.java:745)</div><div>2016-06-27 03:52:33.562 -0400 (,,,) catalina-exec-3 : DEBUG com.tableausoftware.domain.user.saml.SAMLExtendedProcessingFilter - SAML login failed due generic exception Incoming SAML message has no valid value for username attribute. Please verify ServiceProvider configuration in Identity Provider.</div><div>2016-06-27 03:52:33.562 -0400 (,,,) catalina-exec-3 : INFO com.tableausoftware.domain.user.saml.SAMLExtendedProcessingFilter - SAML login failed, redirecting user to /#/error/saml/16</div></div><div>Thanks,</div><div>Muthu<span class="HOEnZb"><font color="#888888"><br clear="all"><div><br></div>-- <br><div data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><b>Muthuraman S</b><div><span style="font-size:12.8px">PwC | SDC Manager | IdAM</span></div><div><div style="font-size:12.8px">Office: <a href="tel:%2B1%20404-838-4445" value="+14046021223" style="color:rgb(17,85,204)" target="_blank">+1 404-838-4445</a> | Mobile: <a href="tel:%2B91-9886302072" value="+919845127625" style="color:rgb(17,85,204)" target="_blank">+91-9886302072</a></div><div style="font-size:12.8px">Email: <a href="mailto:muthuraman.sethuraman@pwc.com" style="color:rgb(17,85,204)" target="_blank">muthuraman.sethuraman@pwc.com</a></div><div style="font-size:12.8px">PricewaterhouseCoopers LLP</div><div style="font-size:12.8px">EGL Business Park, Bengaluru, India</div><div style="font-size:12.8px"><span style="font-size:12.8px"><a href="http://www.pwc.com/us" style="color:rgb(17,85,204)" target="_blank">http://www.pwc.com/us</a></span></div></div></div></div></div></div></div></div></div></div>
</font></span></div></div></div>
</blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><b>Muthuraman S</b><div><span style="font-size:12.8px">PwC | SDC Manager | IdAM</span></div><div><div style="font-size:12.8px">Office: <a href="tel:%2B1%20404-838-4445" value="+14046021223" style="color:rgb(17,85,204)" target="_blank">+1 404-838-4445</a> | Mobile: <a href="tel:%2B91-9886302072" value="+919845127625" style="color:rgb(17,85,204)" target="_blank">+91-9886302072</a></div><div style="font-size:12.8px">Email: <a href="mailto:muthuraman.sethuraman@pwc.com" style="color:rgb(17,85,204)" target="_blank">muthuraman.sethuraman@pwc.com</a></div><div style="font-size:12.8px">PricewaterhouseCoopers LLP</div><div style="font-size:12.8px">EGL Business Park, Bengaluru, India</div><div style="font-size:12.8px"><span style="font-size:12.8px"><a href="http://www.pwc.com/us" style="color:rgb(17,85,204)" target="_blank">http://www.pwc.com/us</a></span></div></div></div></div></div></div></div></div></div></div>
</div>
<HR>The information transmitted, including any attachments, is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited, and all liability arising therefrom is disclaimed. If you received this in error, please contact the sender and delete the material from any computer. PricewaterhouseCoopers LLP is a Delaware limited liability partnership. This communication may come from PricewaterhouseCoopers LLP or one of its subsidiaries.<BR>