<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<style type="text/css" style="display:none;"><!-- P {margin-top:0;margin-bottom:0;} --></style>
</head>
<body dir="ltr">
<div id="divtagdefaultwrapper" style="font-size:11pt;color:#000000;font-family:Calibri,Helvetica,sans-serif;" dir="ltr">
<p>How are you determining that the attribute "isn't being sent"? Are you looking at your IdP logs to see what attributes are being released, inspecting the assertion "on-the-wire", or inspecting the attribute collection available at the SP?</p>
<p><br>
</p>
<p>Also, the attribute names you are using seem to be incorrect. As far as I can tell, that OID doesn't resolve to anything.<span></span></p>
<p><span><br>
</span></p>
<p><span>Michael</span></p>
</div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> users <users-bounces@shibboleth.net> on behalf of Clayton <upnyhgb8v6@snkmail.com><br>
<b>Sent:</b> Wednesday, November 8, 2017 4:05:51 PM<br>
<b>To:</b> users@shibboleth.net<br>
<b>Subject:</b> how to add a non-single valued attribute, like memberOf</font>
<div> </div>
</div>
<style type="text/css">
<!--
body
{margin-left:10px;
margin-right:10px;
margin-top:10px;
margin-bottom:10px}
-->
</style>
<div>
<div align="left" style="text-align:left"><font face="Calibri" size="+1" color="#000000" style="font-family:Calibri; font-size:14pt; color:#000000">We've got Shibboleth attached to ActiveDirectory and it's resolving single-valued attributes, like "sn", just
fine.</font></div>
<div align="left" style="text-align:left"><font face="Calibri" size="+1" color="#000000" style="font-family:Calibri; font-size:14pt; color:#000000">But now I'm trying to add a list-type attribute, "memberOf", so that it can be sent to SPs and it isn't being
sent.</font></div>
<br>
<div align="left" style="text-align:left"><font face="Calibri" size="+1" color="#000000" style="font-family:Calibri; font-size:14pt; color:#000000">I expected just adding these to attribute-resolver.conf and then adding it to the attribute-filter entry for
an SP would do the trick, but it doesn't seem so:</font></div>
<br>
<div align="left" style="text-align:left"><font face="Calibri" size="+1" color="#000000" style="font-family:Calibri; font-size:14pt; color:#000000"><AttributeDefinition id="memberOf" xsi:type="Simple" sourceAttributeID="memberOf"></font></div>
<div align="left" style="text-align:left"><font face="Calibri" size="+1" color="#000000" style="font-family:Calibri; font-size:14pt; color:#000000"> <Dependency ref="myLDAP" /></font></div>
<div align="left" style="text-align:left"><font face="Calibri" size="+1" color="#000000" style="font-family:Calibri; font-size:14pt; color:#000000"> <AttributeEncoder xsi:type="SAML1String" name="urn:oid:1.3.6.1.4.1.1466.115.121.1.12" encodeType="false"
/></font></div>
<div align="left" style="text-align:left"><font face="Calibri" size="+1" color="#000000" style="font-family:Calibri; font-size:14pt; color:#000000"> <AttributeEncoder xsi:type="SAML2String" name="urn:oid:1.3.6.1.4.1.1466.115.121.1.12" friendlyName="memberOf"
encodeType="false" /></font></div>
<div align="left" style="text-align:left"><font face="Calibri" size="+1" color="#000000" style="font-family:Calibri; font-size:14pt; color:#000000"></AttributeDefinition></font></div>
<br>
<div align="left" style="text-align:left"><font face="Calibri" size="+1" color="#000000" style="font-family:Calibri; font-size:14pt; color:#000000">Any tips?</font></div>
<div align="left" style="text-align:left"><font face="Calibri" size="+1" color="#000000" style="font-family:Calibri; font-size:14pt; color:#000000">Thanks in advance!</font></div>
<div align="left" style="text-align:left"><font face="Calibri" size="+1" color="#000000" style="font-family:Calibri; font-size:14pt; color:#000000">--Clayton</font></div>
</div>
</body>
</html>