<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"><!-- P {margin-top:0;margin-bottom:0;} --></style>
</head>
<body dir="ltr">
<div id="divtagdefaultwrapper" style="font-size:12pt;color:#000000;font-family:Calibri,Arial,Helvetica,sans-serif;" dir="ltr">
<p>Afternoon,</p>
<p><br>
</p>
<p>I have an old 2.4.0 IDP (about to be upgraded) that releases saml subjects in the following format (notice the lack of an @site.edu in the subject. Our 3.x IDP is working fine but the production system is still 2.4.0 and refuses to add the @site.edu to the
subject. </p>
<p><br>
</p>
<p>I double checked the attribute resolver file and confirmed that all instances of the emailAddress nameid format are scoped. </p>
<p><br>
</p>
<p></p>
<div> <saml2:Subject></div>
<div> <saml2:NameID Format="urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress" NameQualifier="https://sso.fau.edu/idp/shibboleth" SPNameQualifier="http://www.webex.com/faulearn">rresnick</saml2:NameID></div>
<div> <saml2:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer"></div>
<div> <saml2:SubjectConfirmationData Address="10.16.173.10" InResponseTo="s2cf9cd2826bd0add88b95af9e536b06579d7707aa" NotOnOrAfter="2017-04-18T18:19:19.472Z" Recipient="https://faulearning.webex.com/dispatcher/SAML2AuthService?siteurl=faulearning"/></div>
<div> </saml2:SubjectConfirmation></div>
<div> </saml2:Subject></div>
<div><br>
</div>
<div>The eduPersonPrincibleName which is meant to be sent as the subject is scoped.</div>
<div><br>
</div>
<div>
<div> <saml2:Attribute FriendlyName="eduPersonPrincipalName" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"></div>
<div> <saml2:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">rresnick@fau.edu</saml2:AttributeValue></div>
<div> </saml2:Attribute></div>
<div><br>
</div>
<div><br>
</div>
<div>And the log line indicates that eduPersonPrincible name is the only nameid that is of the emailaddress format being returned (log lines confirms the incorrect subject.) </div>
<div><br>
</div>
<div>
<div>14:14:21.321 - INFO [Shibboleth-Audit:1028] - [10.16.173.10] - 20170418T181421Z|urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect|s2cf9cd2826bd0add88b95af9e536b06579d7707aa|http://www.webex.com/faulearn|urn:mace:shibboleth:2.0:profiles:saml2:sso|https://sso.fau.edu/idp/shibboleth|urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST|_0b1459d95aa19575bfd66f19199a8948|rresnick|urn:oasis:names:tc:SAML:2.0:ac:classes:Password|eduPersonPrincipalName,surname,givenName,eduPersonEntitlement,transientId,eduPersonTargetedID,email,|rresnick|_776a2d6d721a45215051df6986da9dd3,|</div>
<div><br>
</div>
<div><br>
</div>
<div>Any thoughts on what could be going on or which file to check out. </div>
</div>
<br>
</div>
<br>
<p></p>
<p><br>
</p>
<div id="Signature">
<div id="divtagdefaultwrapper" style="background-color:rgb(255,255,255)">
<div name="divtagdefaultwrapper" style="margin:0px">
<div style="background-color:rgb(255,255,255)">
<p class="x_MsoNormal" style="color:rgb(33,33,33); font-family:'Times New Roman',serif; font-size:12pt; margin:0in 0in 0pt; background-color:rgb(255,255,255)">
<span style="color:black; font-family:Calibri,sans-serif; font-size:10.5pt">Rhian Resnick</span></p>
<p class="x_MsoNormal" style="color:rgb(33,33,33); font-family:'Times New Roman',serif; font-size:16px; margin:0in 0in 0pt; background-color:rgb(255,255,255)">
<span style="color:black; font-family:Calibri,sans-serif; font-size:10.5pt">Assistant Director Middleware and HPC</span><span style="color:black; font-family:Calibri,sans-serif; font-size:11pt"></span></p>
<p class="x_MsoNormal" style="color:rgb(33,33,33); font-family:'Times New Roman',serif; font-size:16px; margin:0in 0in 0pt; background-color:rgb(255,255,255)">
<span style="color:black; font-family:Calibri,sans-serif; font-size:10.5pt">Office of Information Technology</span></p>
<p class="x_MsoNormal" style="color:rgb(33,33,33); font-family:'Times New Roman',serif; font-size:12pt; margin:0in 0in 0pt; background-color:rgb(255,255,255)">
<span style="color:black; font-family:Calibri,sans-serif; font-size:10.5pt"><br>
</span></p>
<p class="x_MsoNormal" style="color:rgb(33,33,33); font-family:'Times New Roman',serif; font-size:12pt; margin:0in 0in 0pt; background-color:rgb(255,255,255)">
<span style="color:black; font-family:Calibri,sans-serif; font-size:10.5pt">Florida Atlantic University</span><span style="color:black; font-family:Calibri,sans-serif; font-size:11pt"></span></p>
<p class="x_MsoNormal" style="color:rgb(33,33,33); font-family:'Times New Roman',serif; font-size:12pt; margin:0in 0in 0pt; background-color:rgb(255,255,255)">
<span style="color:black; font-family:Calibri,sans-serif; font-size:10.5pt">777 Glades Road, CM22, Rm 173B</span><span style="color:black; font-family:Calibri,sans-serif; font-size:11pt"></span></p>
<p class="x_MsoNormal" style="color:rgb(33,33,33); font-family:'Times New Roman',serif; font-size:12pt; margin:0in 0in 0pt; background-color:rgb(255,255,255)">
<span style="color:black; font-family:Calibri,sans-serif; font-size:10.5pt">Boca Raton, FL 33431</span><span style="color:black; font-family:Calibri,sans-serif; font-size:11pt"></span></p>
<p class="x_MsoNormal" style="color:rgb(33,33,33); font-family:'Times New Roman',serif; font-size:12pt; margin:0in 0in 0pt; background-color:rgb(255,255,255)">
<span style="color:black; font-family:Calibri,sans-serif; font-size:10.5pt">Phone 561.297.2647</span><span style="color:black; font-family:Calibri,sans-serif; font-size:11pt"></span></p>
<p class="x_MsoNormal" style="color:rgb(33,33,33); font-family:'Times New Roman',serif; font-size:12pt; margin:0in 0in 0pt; background-color:rgb(255,255,255)">
<span style="color:black; font-family:Calibri,sans-serif; font-size:10.5pt">Fax 561.297.0222</span></p>
<p class="x_MsoNormal" style="color:rgb(33,33,33); font-family:'Times New Roman',serif; font-size:12pt; margin:0in 0in 0pt; background-color:rgb(255,255,255)">
<span style="color:black; font-family:Calibri,sans-serif; font-size:10.5pt"> </span><span style="color:rgb(31,73,125); font-family:Calibri,sans-serif; font-size:11pt"><a href="https://hpc.fau.edu/wp-content/uploads/2015/01/image.jpg" style="border:0px; font-family:Arial,Helvetica,sans-serif; font-size:13px; line-height:21px; margin:0px; padding:0px; vertical-align:baseline; color:rgb(0,102,204); text-decoration:none; background-color:rgb(239,239,239)" id="LPNoLP"><img alt="image" class="alignnone size-full wp-image-498" style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 5px; padding: 0px; vertical-align: middle; max-width: 100%; width: 195px; user-select: none;" src="http://hpc.fau.edu/wp-content/uploads/2015/01/image.jpg"></a></span></p>
</div>
</div>
</div>
</div>
</div>
</body>
</html>