<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"Lucida Console";
panose-1:2 11 6 9 4 5 4 2 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
span.EmailStyle18
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-CA" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal">Hi,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I am having problems setting up an IDP initiated connection with a vendor (VendorX), using Shibboleth 3.3.1. I have had some trouble getting properly formed metadata from the vendor, but I think what I have now should work, but I am getting
the following log messages when using the Unsolicited SSO URL (eg: https://ouridp/idp/profile/SAML2/Unsolicited/SSO?providerId=VendorX):<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt;text-autospace:none"><span style="font-size:9.0pt;font-family:"Lucida Console"">2017-09-26 09:46:57,196 - INFO [org.opensaml.saml.common.binding.impl.SAMLMetadataLookupHandler:128] - Message Handler: No metadata
returned for VendorX in role {urn:oasis:names:tc:SAML:2.0:metadata}SPSSODescriptor with protocol urn:oasis:names:tc:SAML:2.0:protocol<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:36.0pt;text-autospace:none"><span style="font-size:9.0pt;font-family:"Lucida Console"">2017-09-26 09:46:57,291 - WARN [net.shibboleth.idp.profile.impl.SelectProfileConfiguration:111] - Profile Action SelectProfileConfiguration:
Profile http://shibboleth.net/ns/profiles/saml2/sso/browser is not available for RP configuration shibboleth.UnverifiedRelyingParty (RPID VendorX)<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:36.0pt"><span style="font-size:9.0pt;font-family:"Lucida Console"">2017-09-26 09:46:57,328 - WARN [org.opensaml.profile.action.impl.LogEvent:105] - A non-proceed event occurred while processing the request: InvalidProfileConfiguration<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Lucida Console""><o:p> </o:p></span></p>
<p class="MsoNormal">I didn’t think I needed to<span style="font-size:9.0pt;font-family:"Lucida Console"">
</span>setup UnverifiedRelyingParty, due to my config in relying-party.xml. Turning on DEBUG for idp.loglevel.opensaml, shows that the metadata provider is being resolved<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt;text-autospace:none"><span style="font-size:9.0pt;font-family:"Lucida Console"">2017-09-27 05:36:35,238 - DEBUG [org.opensaml.saml.metadata.resolver.impl.AbstractReloadingMetadataResolver:283] - Metadata Resolver
FilesystemMetadataResolver <span style="color:black;background:silver;mso-highlight:silver">
VENDOR-MD</span>: Be<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:36.0pt;text-autospace:none"><span style="font-size:9.0pt;font-family:"Lucida Console"">ginning refresh of metadata from 'vendor-metadata.xml'<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:36.0pt;text-autospace:none"><span style="font-size:9.0pt;font-family:"Lucida Console"">2017-09-27 05:36:35,238 - DEBUG [org.opensaml.saml.metadata.resolver.impl.AbstractReloadingMetadataResolver:290] - Metadata Resolver
FilesystemMetadataResolver <span style="color:black;background:silver;mso-highlight:silver">
VENDOR-MD</span>: Pr<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:36.0pt;text-autospace:none"><span style="font-size:9.0pt;font-family:"Lucida Console"">ocessing new metadata from 'vendor-metadata.xml'<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:36.0pt;text-autospace:none"><span style="font-size:9.0pt;font-family:"Lucida Console"">2017-09-27 05:36:35,239 - DEBUG [org.opensaml.saml.metadata.resolver.impl.AbstractReloadingMetadataResolver:380] - Metadata Resolver
FilesystemMetadataResolver <span style="color:black;background:silver;mso-highlight:silver">
VENDOR-MD</span>: Un<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:36.0pt;text-autospace:none"><span style="font-size:9.0pt;font-family:"Lucida Console"">marshalling metadata from 'vendor-metadata.xml'<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:36.0pt;text-autospace:none"><span style="font-size:9.0pt;font-family:"Lucida Console"">2017-09-27 05:36:35,241 - WARN [org.opensaml.saml.metadata.resolver.impl.AbstractReloadingMetadataResolver:402] - Metadata Resolver
FilesystemMetadataResolver <span style="color:black;background:silver;mso-highlight:silver">
VENDOR-MD</span>: Ent<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:36.0pt;text-autospace:none"><span style="font-size:9.0pt;font-family:"Lucida Console"">ire metadata document from 'vendor-metadata.xml' was expired at time of loading, existing metadata retained<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:36.0pt;text-autospace:none"><span style="font-size:9.0pt;font-family:"Lucida Console"">2017-09-27 05:36:35,242 - INFO [org.opensaml.saml.metadata.resolver.impl.AbstractReloadingMetadataResolver:306] - Metadata Resolver
FilesystemMetadataResolver <span style="color:black;background:silver;mso-highlight:silver">
VENDOR-MD</span>: Nex<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:36.0pt;text-autospace:none"><span style="font-size:9.0pt;font-family:"Lucida Console"">t refresh cycle for metadata provider 'vendor-metadata.xml' will occur on '2017-09-27T12:41:35.242Z' ('2017-09-27T05:41:35.242-07:00'
local t<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:36.0pt"><span style="font-size:9.0pt;font-family:"Lucida Console"">ime)</span><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">When I hit the Unsolicited SSO URL I see that it does not find the entityID of ‘VendorX’ within my metadata provider even though that is what it is in my metadata.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt;text-autospace:none"><span style="font-size:9.0pt;font-family:"Lucida Console"">2017-09-27 05:40:33,818 - DEBUG [org.opensaml.saml.metadata.resolver.impl.AbstractMetadataResolver:434] - Metadata Resolver FilesystemMetadataResolver
<span style="color:black;background:silver;mso-highlight:silver">VENDOR-MD</span>: Metadata backing store does not contain any EntityDescriptors with the ID: VendorX<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:36.0pt;text-autospace:none"><span style="font-size:9.0pt;font-family:"Lucida Console"">2017-09-27 05:40:33,818 - DEBUG [org.opensaml.saml.metadata.resolver.impl.AbstractBatchMetadataResolver:161] - Metadata Resolver FilesystemMetadataResolver
<span style="color:black;background:silver;mso-highlight:silver">VENDOR-MD</span>: Resolved 0 candidates via EntityIdCriterion: EntityIdCriterion [id=VendorX]<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:36.0pt;text-autospace:none"><span style="font-size:9.0pt;font-family:"Lucida Console"">2017-09-27 05:40:33,821 - DEBUG [org.opensaml.saml.metadata.resolver.impl.AbstractMetadataResolver:586] - Metadata Resolver FilesystemMetadataResolver
<span style="color:black;background:silver;mso-highlight:silver">VENDOR-MD</span>: Candidates iteration was empty, nothing to filter via predicates<o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">The config I thought is relevant is included below, did I miss something obvious? I’ve been searching through the mailing list and thought I did everything required from https://wiki.shibboleth.net/confluence/display/IDP30/UnsolicitedSSOConfiguration.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">vendor-metadata.xml:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:9.0pt;font-family:"Lucida Console";color:#0000BF"><?</span><span style="font-size:9.0pt;font-family:"Lucida Console";color:#00BF00">xml version</span><span style="font-size:9.0pt;font-family:"Lucida Console"">=<span style="color:#BF0000">"1.0"</span><span style="color:#0000BF">?><o:p></o:p></span></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:9.0pt;font-family:"Lucida Console";color:#00BFBF"><</span><span style="font-size:9.0pt;font-family:"Lucida Console";color:#BF00BF">md</span><span style="font-size:9.0pt;font-family:"Lucida Console";color:#0000BF">:</span><span style="font-size:9.0pt;font-family:"Lucida Console";color:#00BFBF">EntityDescriptor
</span><span style="font-size:9.0pt;font-family:"Lucida Console";color:#00BF00">xmlns</span><span style="font-size:9.0pt;font-family:"Lucida Console";color:#0000BF">:</span><span style="font-size:9.0pt;font-family:"Lucida Console";color:#00BF00">md</span><span style="font-size:9.0pt;font-family:"Lucida Console"">=<span style="color:#BF0000">"urn:oasis:names:tc:SAML:2.0:metadata"<o:p></o:p></span></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:9.0pt;font-family:"Lucida Console";color:#00BFBF">
</span><span style="font-size:9.0pt;font-family:"Lucida Console";color:#00BF00">validUntil</span><span style="font-size:9.0pt;font-family:"Lucida Console"">=<span style="color:#BF0000">"2017-09-24T18:39:11Z"<o:p></o:p></span></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:9.0pt;font-family:"Lucida Console";color:#00BFBF">
</span><span style="font-size:9.0pt;font-family:"Lucida Console";color:#00BF00">cacheDuration</span><span style="font-size:9.0pt;font-family:"Lucida Console"">=<span style="color:#BF0000">"PT604800S"<o:p></o:p></span></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:9.0pt;font-family:"Lucida Console";color:#00BFBF">
</span><span style="font-size:9.0pt;font-family:"Lucida Console";color:#00BF00">entityID</span><span style="font-size:9.0pt;font-family:"Lucida Console"">=<span style="color:#BF0000">"VendorX"</span><span style="color:#00BFBF">><o:p></o:p></span></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:9.0pt;font-family:"Lucida Console"">
<span style="color:#00BFBF"><</span><span style="color:#BF00BF">md</span><span style="color:#0000BF">:</span><span style="color:#00BFBF">SPSSODescriptor
</span><span style="color:#00BF00">AuthnRequestsSigned</span>=<span style="color:#BF0000">"false"</span><span style="color:#00BFBF">
</span><span style="color:#00BF00">WantAssertionsSigned</span>=<span style="color:#BF0000">"false"</span><span style="color:#00BFBF">
</span><span style="color:#00BF00">protocolSupportEnumeration</span>=<span style="color:#BF0000">"urn:oasis:names:tc:SAML:2.0:protocol"</span><span style="color:#00BFBF">><o:p></o:p></span></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:9.0pt;font-family:"Lucida Console"">
<span style="color:#00BFBF"><</span><span style="color:#BF00BF">md</span><span style="color:#0000BF">:</span><span style="color:#00BFBF">NameIDFormat></span>urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified<span style="color:#00BFBF"></</span><span style="color:#BF00BF">md</span><span style="color:#0000BF">:</span><span style="color:#00BFBF">NameIDFormat><o:p></o:p></span></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:9.0pt;font-family:"Lucida Console"">
<span style="color:#00BFBF"><</span><span style="color:#BF00BF">md</span><span style="color:#0000BF">:</span><span style="color:#00BFBF">AssertionConsumerService
</span><span style="color:#00BF00">Binding</span>=<span style="color:#BF0000">"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"<o:p></o:p></span></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:9.0pt;font-family:"Lucida Console";color:#00BFBF">
</span><span style="font-size:9.0pt;font-family:"Lucida Console";color:#00BF00">Location</span><span style="font-size:9.0pt;font-family:"Lucida Console"">=<span style="color:#BF0000">"https://vendor.example.com/mvc/sso/saml/login"<o:p></o:p></span></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:9.0pt;font-family:"Lucida Console";color:#00BFBF">
</span><span style="font-size:9.0pt;font-family:"Lucida Console";color:#00BF00">index</span><span style="font-size:9.0pt;font-family:"Lucida Console"">=<span style="color:#BF0000">"1"</span><span style="color:#00BFBF"> /><o:p></o:p></span></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:9.0pt;font-family:"Lucida Console"">
<span style="color:#00BFBF"></</span><span style="color:#BF00BF">md</span><span style="color:#0000BF">:</span><span style="color:#00BFBF">SPSSODescriptor><o:p></o:p></span></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:9.0pt;font-family:"Lucida Console";color:#00BFBF"></</span><span style="font-size:9.0pt;font-family:"Lucida Console";color:#BF00BF">md</span><span style="font-size:9.0pt;font-family:"Lucida Console";color:#0000BF">:</span><span style="font-size:9.0pt;font-family:"Lucida Console";color:#00BFBF">EntityDescriptor><o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">relying-party.xml<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:9.0pt;font-family:"Lucida Console"">
<span style="color:#00BFBF"><bean </span><span style="color:#00BF00">parent</span>=<span style="color:#BF0000">"RelyingPartyByName"</span><span style="color:#00BFBF">
</span><span style="color:#00BF00">c</span><span style="color:#0000BF">:</span><span style="color:#00BF00">relyingPartyIds</span>=<span style="color:#BF0000">"VendorX"</span><span style="color:#00BFBF">></span><span style="color:#BF0000"><o:p></o:p></span></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:9.0pt;font-family:"Lucida Console"">
<span style="color:#00BFBF"><property </span><span style="color:#00BF00">name</span>=<span style="color:#BF0000">"profileConfigurations"</span><span style="color:#00BFBF">><o:p></o:p></span></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:9.0pt;font-family:"Lucida Console"">
<span style="color:#00BFBF"><list><o:p></o:p></span></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:9.0pt;font-family:"Lucida Console"">
<span style="color:#00BFBF"><bean </span><span style="color:#00BF00">parent</span>=<span style="color:#BF0000">"SAML2.SSO"</span><span style="color:#00BFBF">
</span><span style="color:#00BF00">p</span><span style="color:#0000BF">:</span><span style="color:#00BF00">encryptAssertions</span>=<span style="color:#BF0000">"false"</span><span style="color:#00BFBF"> /><o:p></o:p></span></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:9.0pt;font-family:"Lucida Console"">
<span style="color:#00BFBF"></list><o:p></o:p></span></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:9.0pt;font-family:"Lucida Console"">
<span style="color:#00BFBF"></property><o:p></o:p></span></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:9.0pt;font-family:"Lucida Console"">
<span style="color:#00BFBF"></bean><o:p></o:p></span></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:9.0pt;font-family:"Lucida Console";color:#00BFBF"><o:p> </o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:9.0pt;font-family:"Lucida Console";color:#00BFBF"><o:p> </o:p></span></p>
<p class="MsoNormal">metadata-providers.xml<o:p></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:9.0pt;font-family:"Lucida Console""><o:p> </o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:9.0pt;font-family:"Lucida Console"">
<span style="color:#00BFBF"><MetadataProvider </span><span style="color:#00BF00">id</span>=<span style="color:#BF0000">"VENDOR-MD"</span><span style="color:#00BFBF">
</span><span style="color:#00BF00">xsi</span><span style="color:#0000BF">:</span><span style="color:#00BF00">type</span>=<span style="color:#BF0000">"FilesystemMetadataProvider"<o:p></o:p></span></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:9.0pt;font-family:"Lucida Console";color:#00BFBF">
</span><span style="font-size:9.0pt;font-family:"Lucida Console";color:#00BF00">xmlns</span><span style="font-size:9.0pt;font-family:"Lucida Console"">=<span style="color:#BF0000">"urn:mace:shibboleth:2.0:metadata"<o:p></o:p></span></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:9.0pt;font-family:"Lucida Console";color:#00BFBF"> </span><span style="font-size:9.0pt;font-family:"Lucida Console";color:#00BF00">metadataFile</span><span style="font-size:9.0pt;font-family:"Lucida Console"">=<span style="color:#BF0000">"vendor-metadata.xml"</span><span style="color:#00BFBF">
/><o:p></o:p></span></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:9.0pt;font-family:"Lucida Console";color:#00BFBF"><o:p> </o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Attribute-filter.xml<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:9.0pt;font-family:"Lucida Console"">
<span style="color:#00BFBF"><AttributeFilterPolicy </span><span style="color:#00BF00">id</span>=<span style="color:#BF0000">"releaseToVendorX"</span><span style="color:#00BFBF">><o:p></o:p></span></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:9.0pt;font-family:"Lucida Console"">
<span style="color:#00BFBF"><PolicyRequirementRule </span><span style="color:#00BF00">xsi</span><span style="color:#0000BF">:</span><span style="color:#00BF00">type</span>=<span style="color:#BF0000">"Requester"</span><span style="color:#00BFBF">
</span><span style="color:#00BF00">value</span>=<span style="color:#BF0000">"VendorX"</span><span style="color:#00BFBF">/><o:p></o:p></span></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:9.0pt;font-family:"Lucida Console";color:#00BFBF"><o:p> </o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:9.0pt;font-family:"Lucida Console"">
<span style="color:#00BFBF"><AttributeRule </span><span style="color:#00BF00">attributeID</span>=<span style="color:#BF0000">"uid"</span><span style="color:#00BFBF">><o:p></o:p></span></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:9.0pt;font-family:"Lucida Console"">
<span style="color:#00BFBF"><PermitValueRule </span><span style="color:#00BF00">xsi</span><span style="color:#0000BF">:</span><span style="color:#00BF00">type</span>=<span style="color:#BF0000">"ANY"</span><span style="color:#00BFBF">/><o:p></o:p></span></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:9.0pt;font-family:"Lucida Console"">
<span style="color:#00BFBF"></AttributeRule><o:p></o:p></span></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:9.0pt;font-family:"Lucida Console";color:#00BFBF"><o:p> </o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:9.0pt;font-family:"Lucida Console"">
<span style="color:#00BFBF"></AttributeFilterPolicy><o:p></o:p></span></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:9.0pt;font-family:"Lucida Console";color:#00BFBF"><o:p> </o:p></span></p>
<p class="MsoNormal" style="text-autospace:none">Saml-nameid.xml<o:p></o:p></p>
<p class="MsoNormal" style="text-autospace:none">(Trying to provide a standard format rather than
<span style="font-size:9.0pt;font-family:"Lucida Console"">urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified)</span><o:p></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><o:p> </o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:9.0pt;font-family:"Lucida Console"">
<span style="color:#00BFBF"><bean </span><span style="color:#00BF00">parent</span>=<span style="color:#BF0000">"shibboleth.SAML2AttributeSourcedGenerator"<o:p></o:p></span></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:9.0pt;font-family:"Lucida Console";color:#00BFBF">
</span><span style="font-size:9.0pt;font-family:"Lucida Console";color:#00BF00">p</span><span style="font-size:9.0pt;font-family:"Lucida Console";color:#0000BF">:</span><span style="font-size:9.0pt;font-family:"Lucida Console";color:#00BF00">omitQualifiers</span><span style="font-size:9.0pt;font-family:"Lucida Console"">=<span style="color:#BF0000">"true"<o:p></o:p></span></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:9.0pt;font-family:"Lucida Console";color:#00BFBF"> </span><span style="font-size:9.0pt;font-family:"Lucida Console";color:#00BF00">p</span><span style="font-size:9.0pt;font-family:"Lucida Console";color:#0000BF">:</span><span style="font-size:9.0pt;font-family:"Lucida Console";color:#00BF00">format</span><span style="font-size:9.0pt;font-family:"Lucida Console"">=<span style="color:#BF0000">"urn:oid:0.9.2342.19200300.100.1.1"<o:p></o:p></span></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:9.0pt;font-family:"Lucida Console";color:#00BFBF">
</span><span style="font-size:9.0pt;font-family:"Lucida Console";color:#00BF00">p</span><span style="font-size:9.0pt;font-family:"Lucida Console";color:#0000BF">:</span><span style="font-size:9.0pt;font-family:"Lucida Console";color:#00BF00">attributeSourceIds</span><span style="font-size:9.0pt;font-family:"Lucida Console"">=<span style="color:#BF0000">"#{
{'uid'} }"</span><span style="color:#00BFBF">><o:p></o:p></span></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:9.0pt;font-family:"Lucida Console"">
<span style="color:#00BFBF"><property </span><span style="color:#00BF00">name</span>=<span style="color:#BF0000">"activationCondition"</span><span style="color:#00BFBF">><o:p></o:p></span></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:9.0pt;font-family:"Lucida Console"">
<span style="color:#00BFBF"><bean </span><span style="color:#00BF00">parent</span>=<span style="color:#BF0000">"shibboleth.Conditions.RelyingPartyId"</span><span style="color:#00BFBF">
</span><span style="color:#00BF00">c</span><span style="color:#0000BF">:</span><span style="color:#00BF00">candidate</span>=<span style="color:#BF0000">"VendorX"</span><span style="color:#00BFBF"> /><o:p></o:p></span></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:9.0pt;font-family:"Lucida Console""> <span style="color:#00BFBF"></property><o:p></o:p></span></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:9.0pt;font-family:"Lucida Console"">
<span style="color:#00BFBF"></bean></span></span><o:p></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><o:p> </o:p></p>
<p class="MsoNormal">Any pointers appreciated.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Thanks,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Jason<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>