<html><head></head><body><div style="color:#000; background-color:#fff; font-family:Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:13px"><div id="yui_3_16_0_ym19_1_1520346615306_138378"></div><div id="yiv5185132785yui_3_16_0_ym19_1_1520346615306_109283">Hello Shib Users,</div><div id="yiv5185132785yui_3_16_0_ym19_1_1520346615306_109284"><br></div><div id="yiv5185132785yui_3_16_0_ym19_1_1520346615306_107590"> I have a curious situation. <br></div><div id="yiv5185132785yui_3_16_0_ym19_1_1520346615306_109270"><br></div><div id="yiv5185132785yui_3_16_0_ym19_1_1520346615306_109262" dir="ltr">
I have an SP that our users use and I've noticed that not all users get
the same attributes sent. For example, when I login I get the
following attributes:</div><div dir="ltr" id="yiv5185132785yui_3_16_0_ym19_1_1520346615306_109326"><br></div><div dir="ltr" id="yiv5185132785yui_3_16_0_ym19_1_1520346615306_109320"> "name": "eduPersonPrimaryAffiliation",<br> <br> "name": "mail",<br> <br> "name": "displayName",<br> <br> "name": "surname",<br> <br> "name": "givenName",<br> <br> "name": "eduPersonPrincipalName",<br></div><div dir="ltr" id="yiv5185132785yui_3_16_0_ym19_1_1520346615306_109371"><br></div><div dir="ltr" id="yiv5185132785yui_3_16_0_ym19_1_1520346615306_109370"> Another user gets the following:</div><div dir="ltr" id="yiv5185132785yui_3_16_0_ym19_1_1520346615306_109380"><br> "name": "mail",<br> <br> "name": "displayName",<br><br> "name": "surname",<br><br> "name": "givenName",<br> <br> "name": "eduPersonPrincipalName",<br> <br></div><div dir="ltr" id="yiv5185132785yui_3_16_0_ym19_1_1520346615306_109389"> As you can see "eduPersonPrimaryAffiliation" is missing on this second user.</div><div dir="ltr" id="yiv5185132785yui_3_16_0_ym19_1_1520346615306_109421"><br></div><div dir="ltr" id="yiv5185132785yui_3_16_0_ym19_1_1520346615306_109422"> So, my questions are:</div><div dir="ltr" id="yiv5185132785yui_3_16_0_ym19_1_1520346615306_109423"><br></div><div dir="ltr" id="yiv5185132785yui_3_16_0_ym19_1_1520346615306_109430"> 1) Is this more likely an AD issue or a Shibboleth issue?<br></div><div dir="ltr" id="yiv5185132785yui_3_16_0_ym19_1_1520346615306_109424"> 2) If an attributed isn't populated in AD will it not be visible in Shibboleth</div><div dir="ltr" id="yiv5185132785yui_3_16_0_ym19_1_1520346615306_109446"><br></div><div dir="ltr" id="yiv5185132785yui_3_16_0_ym19_1_1520346615306_111184">
I have two shibboleth clusters because 1 of our SPs needs the NameID
property to deliver email, and the second cluster has NameID set to
transient which is required by other SPs. I see the same behavior on
both clusters so either I made the same mistake on both clusters or AD
is somehow behind it.</div><div dir="ltr" id="yiv5185132785yui_3_16_0_ym19_1_1520346615306_112776"><br></div><div dir="ltr" id="yiv5185132785yui_3_16_0_ym19_1_1520346615306_112794">Thanks in Advance</div>-Bob<div id="yui_3_16_0_ym19_1_1520346615306_138378"><span></span></div><div> </div><div class="signature"><div>--<br>Bob Lamothe<br>robert_lamothe@yahoo.com<br>KB1BOB<br>603-918-6336<br><br></div></div></div></body></html>