<div dir="ltr">I have changed track -- and am getting error below now.<br><div><br>2017-07-18 23:54:32,829 - ERROR [org.opensaml.saml.saml2.profile.impl.AddNameIDToSubjects:404] - Profile Action AddNameIDToSubjects: Error while generating NameID<br>org.opensaml.saml.common.SAMLException: Invalid NameIdentifierGenerationService configuration<br> at net.shibboleth.idp.saml.nameid.impl.ProxySAML2NameIDGenerator.generate(ProxySAML2NameIDGenerator.java:62)</div><div><br></div><div>Any thoughts on where I may be messing up?</div><div><br></div><div><b>SAML-NAMEID.XML</b></div><div><bean id="PersistentIdStore" class="org.apache.commons.dbcp2.BasicDataSource" destroy-method="close"<br> p:driverClassName="oracle.jdbc.driver.OracleDriver"<br> p:url="jdbc:oracle:thin:@iblag:1521:id1tst" p:username="bah" p:password="blah"<br> p:initialSize="5" p:maxTotal="50" p:maxIdle="5" p:maxWaitMillis="2000" p:testOnBorrow="true"<br> p:testWhileIdle="true" p:testOnReturn="true" p:timeBetweenEvictionRunsMillis="120000"<br> p:minEvictableIdleTimeMillis="120000" p:validationQuery="select 1 from dual" p:validationQueryTimeout="4" /><br> <br> <!-- A "store" bean suitable for use in the idp.persistentId.store property. --><br> <bean id="MyPersistentIdStore" parent="shibboleth.JDBCPersistentIdStore"<br> p:dataSource-ref="PersistentIdStore"<br> p:queryTimeout="PT2S"<br> p:retryableErrors="#{{'23000'}}" /><br> <br> <!-- SAML 2 NameID Generation --><br> <util:list id="shibboleth.SAML2NameIDGenerators"><br> <ref bean="shibboleth.SAML2TransientGenerator" /><br> <ref bean="shibboleth.SAML2PersistentGenerator" /><br> </util:list><br></div><div><br></div><div><b><br></b></div><div><b><br></b></div><div><b>SAML-NAMEID.PROPERTIES</b></div><div>idp.persistentId.generator = shibboleth.StoredPersistentIdGenerator<br>idp.persistentId.dataSource = PersistentIdDataSource</div><div><br></div><div><b><br></b></div><div><b><br></b></div><div><b>ATTRIBUTE-RESOLVER.XML</b></div><div><resolver:AttributeDefinition id="persistentNameIdSourceUid" xsi:type="Simple" xmlns="urn:mace:shibboleth:2.0:resolver:ad" sourceAttributeID="uid"><br> <resolver:Dependency ref="dir" /><br> </resolver:AttributeDefinition></div><div><br></div><div><b><br></b></div><div><b><br></b></div><div><b>ATTRIBUTE-FILTER.XML</b></div><div> <AttributeFilterPolicy id="persistentNameIdSourceUid2All"><br> <PolicyRequirementRule xsi:type="ANY" /><br> <br> <AttributeRule attributeID="persistentNameIdSourceUid"><br> <PermitValueRule xsi:type="ANY" /><br> </AttributeRule><br> </AttributeFilterPolicy><br></div><div><br></div></div><div class="gmail_extra"><br><div class="gmail_quote">On 18 July 2017 at 19:41, Joshua Brodie <span dir="ltr"><<a href="mailto:josbrodie@gmail.com" target="_blank">josbrodie@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div>Long email -- includes extracts from saml-nameid.properties, saml-nameid.xml, and global.xml.<br></div><div><br></div><div>I have googled the heck out of this -- and reread all the documentations -- I must be missing something.</div><div><br></div><div>The 'uid' has been released to all in attribute-filter.xml.</div><div><br></div><div>But nothing appears in the SHIBPID table after authentication -- and there does not seem to be any errors in the logs --- any tips on where to look?<br></div><div><br></div><div><br>SAML-NAMEID.PROPERTIES<br>idp.persistentId.<wbr>sourceAttribute = employeeNumber<br>idp.persistentId.salt =nadahere<br>idp.persistentId.generator = shibboleth.<wbr>StoredPersistentIdGenerator<br>idp.persistentId.dataSource = shibboleth.JPAStorageService.<wbr>DataSource<br><br><br><br>SAML-NAMEID.XML<br><!-- SAML 2 NameID Generation --><br> <util:list id="shibboleth.<wbr>SAML2NameIDGenerators"><br> <ref bean="shibboleth.<wbr>SAML2TransientGenerator" /><br> <ref bean="shibboleth.<wbr>SAML2PersistentGenerator" /><br> </util:list><br><br><br></div>GLOBAL.XML<br> <bean id="shibboleth.<wbr>JPAStorageService.DataSource" class="org.apache.commons.<wbr>dbcp2.BasicDataSource" destroy-method="close"<br> p:driverClassName="oracle.<wbr>jdbc.driver.OracleDriver"<br> p:url="jdbc:oracle:thin:@<wbr>iOracle:1521:neem" p:username="IDP" p:password="ukelele"<br> p:initialSize="5" p:maxTotal="50" p:maxIdle="5" p:maxWaitMillis="2000" p:testOnBorrow="true"<br> p:testWhileIdle="true" p:testOnReturn="true" p:<wbr>timeBetweenEvictionRunsMillis=<wbr>"120000"<br> p:minEvictableIdleTimeMillis="<wbr>120000" p:validationQuery="select 1 from dual" p:validationQueryTimeout="4" /><br> <br> <br> <bean id="shibboleth.<wbr>JPAStorageService" class="org.opensaml.storage.<wbr>impl.JPAStorageService"<br> p:cleanupInterval="%{idp.<wbr>storage.cleanupInterval:PT10M}<wbr>"<br> c:factory-ref="shibboleth.<wbr>JPAStorageService.<wbr>entityManagerFactory"/><br><br> <bean id="shibboleth.<wbr>JPAStorageService.<wbr>entityManagerFactory"<br> class="org.springframework.<wbr>orm.jpa.<wbr>LocalContainerEntityManagerFac<wbr>toryBean"><br> <property name="packagesToScan" value="org.opensaml.storage.<wbr>impl"/><br> <property name="dataSource" ref="OracleDataSource"/><br> <property name="jpaVendorAdapter" ref="shibboleth.<wbr>JPAStorageService.<wbr>JPAVendorAdapter"/><br> <property name="jpaDialect"><br> <bean class="org.springframework.<wbr>orm.jpa.vendor.<wbr>HibernateJpaDialect" /><br> </property><br> </bean><br> <br> <bean id="shibboleth.<wbr>JPAStorageService.<wbr>JPAVendorAdapter" class="org.springframework.<wbr>orm.jpa.vendor.<wbr>HibernateJpaVendorAdapter"><br> <property name="database" value="ORACLE" /><br> </bean><br></div>
</blockquote></div><br></div>