<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
<title></title>
<style type="text/css">
<!--
body{margin-left:10px;margin-right:10px;margin-top:10px;margin-bottom:10px;}
-->
</style>
</head>
<body marginleft="10" marginright="10" margintop="10" marginbottom="10">
<div align="left" style="text-align:left;"><font face="Calibri" size="+1" color="#000000" style="font-family:Calibri;font-size:14pt;color:#000000;">And there it is. The attribute is indeed being sent over! It was every bit as simple as just added the new attribute to the resolver. </font></div>
<div align="left" style="text-align:left;"><font face="Calibri" size="+1" color="#000000" style="font-family:Calibri;font-size:14pt;color:#000000;">Not sure why my CGI script wasn't showing it, but it's going to the server.</font></div>
<br />
<div align="left" style="text-align:left;"><font face="Calibri" size="+1" color="#000000" style="font-family:Calibri;font-size:14pt;color:#000000;">How much does the OID matter?</font></div>
<br />
<div align="left" style="text-align:left;"><font face="Calibri" size="+1" color="#000000" style="font-family:Calibri;font-size:14pt;color:#000000;">Thanks!</font></div>
<div align="left" style="text-align:left;"><font face="Calibri" size="+1" color="#000000" style="font-family:Calibri;font-size:14pt;color:#000000;">--Clayton</font></div>
<br />
<div align="left" style="text-align:left;"><font face="Arial" size="+0" color="#000000" style="font-family:Arial;font-size:10pt;color:#000000;"><b>"Shib Users users-at-shibboleth.net |Shib|" <<a href="mailto:3unnche4it@sneakemail.com">3unnche4it@sneakemail.com</a>> on Wednesday, November 08, 2017 at 5:31 PM -0500 wrote:</b></font></div>
<div align="left" style="text-align:left;"><span style="background-color:#d0d0d0;"><font face="Calibri" size="+1" color="#000000" style="font-family:Calibri;font-size:14pt;color:#000000;">That's correct, it's the Syntax OID. I thought the OID used by one of the other attributes we're sending was using the Syntax one. There's also a Numeric OID that I've tried.</font></span></div>
<br />
<div align="left" style="text-align:left;"><span style="background-color:#d0d0d0;"><font face="Calibri" size="+1" color="#000000" style="font-family:Calibri;font-size:14pt;color:#000000;">I'm determining that the IdP isn't sending the new attribute by looking at the output of a simple CGI script I wrote that lives on a server we have running the Shibboleth SP. I haven't actually looked at the XML being sent to that server yet.</font></span></div>
<br />
<div align="left" style="text-align:left;"><span style="background-color:#d0d0d0;"><font face="Calibri" size="+1" color="#000000" style="font-family:Calibri;font-size:14pt;color:#000000;">--Clayton</font></span></div>
<br />
<div align="left" style="text-align:left;"><span style="background-color:#d0d0d0;"><font face="Arial" size="+0" color="#000000" style="font-family:Arial;font-size:10pt;color:#000000;"><b>"Shib Users users-at-shibboleth.net |Shib|" <</b></font></span><a href="mailto:3unnche4it@sneakemail.com"><span style="background-color:#d0d0d0;"><font face="Arial" size="+0" style="font-family:Arial;font-size:10pt;"><b>3unnche4it@sneakemail.com</b></font></span></a><span style="background-color:#d0d0d0;"><font face="Arial" size="+0" color="#000000" style="font-family:Arial;font-size:10pt;color:#000000;"><b>> on Wednesday, November 08, 2017 at 5:23 PM -0500 wrote:</b></font></span></div>
<div align="left" style="text-align:left;"><span style="background-color:#d0d0d0;"><font face="Times New Roman" size="+0" color="#000000" style="font-family:Times New Roman;font-size:12pt;color:#000000;">On 11/8/17, 5:20 PM, "users on behalf of Domingues, Michael D" wrote:</font></span></div>
<br />
<div align="left" style="text-align:left;"><span style="background-color:#d0d0d0;"><font face="Times New Roman" size="+0" color="#000000" style="font-family:Times New Roman;font-size:12pt;color:#000000;">> Also, the attribute names you are using seem to be incorrect. As far as I can tell, that OID doesn't resolve to anything.</font></span></div>
<br />
<div align="left" style="text-align:left;"><span style="background-color:#d0d0d0;"><font face="Times New Roman" size="+0" color="#000000" style="font-family:Times New Roman;font-size:12pt;color:#000000;">I believe it's the OID for "this attribute's syntax is that of a DN". So definitely not what one would use, but does appear to be an actual OID.</font></span></div>
<br />
<div align="left" style="text-align:left;"><span style="background-color:#d0d0d0;"><font face="Times New Roman" size="+0" color="#000000" style="font-family:Times New Roman;font-size:12pt;color:#000000;">-- Scott</font></span></div>
<br />
<br />
<div align="left" style="text-align:left;"><span style="background-color:#d0d0d0;"><font face="Times New Roman" size="+0" color="#000000" style="font-family:Times New Roman;font-size:12pt;color:#000000;">-- </font></span></div>
<div align="left" style="text-align:left;"><span style="background-color:#d0d0d0;"><font face="Times New Roman" size="+0" color="#000000" style="font-family:Times New Roman;font-size:12pt;color:#000000;">For Consortium Member technical support, see </font></span><a href="https://wiki.shibboleth.net/confluence/x/coFAAg" target="_blank"><span style="background-color:#d0d0d0;"><font face="Times New Roman" size="+0" style="font-family:Times New Roman;font-size:12pt;">https://wiki.shibboleth.net/confluence/x/coFAAg</font></span></a></div>
<br />
<br />
<br/>
</body>
</html>