<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
I was looking to fix up our mistaken NameID process from our previous configuration - so not using unspecified as per <a href="https://wiki.shibboleth.net/confluence/display/IDP30/CustomNameIDGenerationConfiguration#CustomNameIDGenerationConfiguration-Dealingwith"Unspecified"" class="">https://wiki.shibboleth.net/confluence/display/IDP30/CustomNameIDGenerationConfiguration#CustomNameIDGenerationConfiguration-Dealingwith%22Unspecified%22</a>.
I’m in control of the SPs and IdP for this.
<div class=""><br class="">
</div>
<div class="">I’ve made the change in dev so now the SAML Assertion contains an attribute with a Name and a NameID with a Format for the same URI - using the URI for NameID is recommended and can’t filter the attribute before Generation. However it seems the
SP extracts the two values and populates the one variable as multivalued with both values the same. I can’t seem to work out a way to stop this behaviour.<br class="">
<div class="">
<div class=""><br class="">
</div>
</div>
</div>
<div class="">So the assertion contains:</div>
<div class=""><saml2:NameID xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion" Format="urn:oid:XXXXXXX" NameQualifier="<a href="https://idp.example.com/idp/shibboleth" class="">https://idp.example.com/idp/shibboleth</a>" SPNameQualifier="<a href="https://sp.example.com/shibboleth" class="">https://sp.example.com/shibboleth</a>”>value</saml2:NameID></div>
<div class=""><saml2:Attribute FriendlyName=“XXXXXXX" Name="urn:oid:XXXXXXX" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"></div>
<div class=""> <saml2:AttributeValue>value</saml2:AttributeValue><br class="">
</saml2:Attribute></div>
<div class=""><br class="">
</div>
<div class="">attribute-map.xml</div>
<div class=""><Attribute name="urn:oid:XXXXXXX" id=“XXXXXXX”/></div>
<div class=""><br class="">
</div>
<div class="">shibd.log</div>
<div class="">2017-04-05 12:00:17 DEBUG Shibboleth.AttributeDecoder.String [2]: decoding SimpleAttribute (XXXXXXX) from SAML 2 NameID with Format (urn:oid:XXXXXXX)<br class="">
2017-04-05 12:00:17 DEBUG Shibboleth.AttributeDecoder.String [2]: decoding SimpleAttribute (XXXXXXX) from SAML 2 Attribute (urn:oid:XXXXXXX) with 1 value(s)<br class="">
2017-04-05 12:00:17 DEBUG Shibboleth.AttributeFilter [2]: filtering 12 attribute(s) from (<a href="https://signon-sys.deakin.edu.au/idp/shibboleth" class="">https://signon-sys.deakin.edu.au/idp/shibboleth</a>)<br class="">
2017-04-05 12:00:17 DEBUG Shibboleth.AttributeFilter [2]: applying filtering rule(s) for attribute (XXXXXXX) from (<a href="https://signon-sys.deakin.edu.au/idp/shibboleth" class="">https://signon-sys.deakin.edu.au/idp/shibboleth</a>)<br class="">
2017-04-05 12:00:17 DEBUG Shibboleth.AttributeFilter [2]: applying filtering rule(s) for attribute (XXXXXXX) from (<a href="https://signon-sys.deakin.edu.au/idp/shibboleth" class="">https://signon-sys.deakin.edu.au/idp/shibboleth</a>)<br class="">
<br class="">
</div>
<div class=""><br class="">
</div>
<div class="">When I inspect the attribute I get:</div>
<div class="">XXXXXXX: “value;value”</div>
<div class="">instead of the previous:</div>
<div class="">XXXXXXX: “value”</div>
<div class=""><br class="">
</div>
<div class="">Is there something else I should be doing here instead?</div>
<div class=""><br class="">
</div>
<div class="">Cheers,</div>
<div class="">Aaron</div>
<span style="font-size: 9.0pt; font-family: 'Calibri'; "><em><strong><br>
Important Notice:</strong> The contents of this email are intended solely for the named addressee and are confidential; any unauthorised use, reproduction or storage of the contents is expressly prohibited. If you have received this email in error, please delete
it and any attachments immediately and advise the sender by return email or telephone.<br>
<br>
Deakin University does not warrant that this email and any attachments are error or virus free.</em></span>
</body>
</html>