<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body dir="auto">
Turn on the protocol debugging and you’ll get the entire SAMLResponse and and SAMLRequest, which is the most helpful thing to see in my experience.
<div><br>
</div>
<div>The issue may well be that the attributes are not being mapped at the other end. Providing the protocol message gives the most clarity as to what needs to be mapped.</div>
<div><br>
</div>
<div>Knowing the SP implementation really helps. </div>
<div><br>
<div id="AppleMailSignature">Sent from my iPhone</div>
<div><br>
On 30/05/2018, at 4:06 AM, Steven Teixeira <<a href="mailto:steixeira@csustan.edu">steixeira@csustan.edu</a>> wrote:<br>
<br>
</div>
<blockquote type="cite">
<div>
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Helvetica;
panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Assuming there’s nothing you don’t want to send via plaintext to them, a copy of the exact SAML response usually works for me.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Steven Teixeira<o:p></o:p></span></p>
</div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">From:</span></b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> users [<a href="mailto:users-bounces@shibboleth.net">mailto:users-bounces@shibboleth.net</a>]
<b>On Behalf Of </b>Robert Lamothe<br>
<b>Sent:</b> Tuesday, May 29, 2018 08:59<br>
<b>To:</b> Shib Users <<a href="mailto:users@shibboleth.net">users@shibboleth.net</a>><br>
<b>Subject:</b> Sent Attributes<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div id="yui_3_16_0_1_1527609077199_2749">
<p class="MsoNormal" style="background:white"><span style="font-size:10.0pt;font-family:"Helvetica",sans-serif;color:black">Hello,<o:p></o:p></span></p>
</div>
<div id="yui_3_16_0_1_1527609077199_2860">
<p class="MsoNormal" style="background:white"><span style="font-size:10.0pt;font-family:"Helvetica",sans-serif;color:black"><o:p> </o:p></span></p>
</div>
<div id="yui_3_16_0_1_1527609077199_2830">
<p class="MsoNormal" style="background:white"><span style="font-size:10.0pt;font-family:"Helvetica",sans-serif;color:black"> I'm working with an SP that's authenticating against my test IDP. We've swapped metadata and that seems to work, I can connect to
their SP, it redirects to my IDP, I authenticate and get a page that identifies the attributes that are being sent and yet the SP claims there are no attributes being delivered.<br>
<br>
<o:p></o:p></span></p>
</div>
<div id="yui_3_16_0_1_1527609077199_2813">
<p class="MsoNormal" style="background:white"><span style="font-size:10.0pt;font-family:"Helvetica",sans-serif;color:black"><o:p> </o:p></span></p>
</div>
<div id="yui_3_16_0_1_1527609077199_2814">
<p class="MsoNormal" style="background:white"><span style="font-size:10.0pt;font-family:"Helvetica",sans-serif;color:black"> I've tested against
<a href="http://shibtest.org">shibtest.org</a> and everything looks good there, I've also had other SPs work against this IDP.<o:p></o:p></span></p>
</div>
<div id="yui_3_16_0_1_1527609077199_4555">
<p class="MsoNormal" style="background:white"><span style="font-size:10.0pt;font-family:"Helvetica",sans-serif;color:black"><br>
<br>
<o:p></o:p></span></p>
</div>
<div id="yui_3_16_0_1_1527609077199_4525">
<p class="MsoNormal" style="background:white"><span style="font-size:10.0pt;font-family:"Helvetica",sans-serif;color:black"> I'm now in a "Your IDP isn't sending attributes" vs "Yes it is, the 'Information Being Provided to Service' page shows what's being
sent" discussion. How to I prove it beyond that?<o:p></o:p></span></p>
</div>
<div id="yui_3_16_0_1_1527609077199_4610">
<p class="MsoNormal" style="background:white"><span style="font-size:10.0pt;font-family:"Helvetica",sans-serif;color:black"><br>
<br>
<o:p></o:p></span></p>
</div>
<div id="yui_3_16_0_1_1527609077199_2858">
<p class="MsoNormal" style="background:white"><span style="font-size:10.0pt;font-family:"Helvetica",sans-serif;color:black">Thanks<o:p></o:p></span></p>
</div>
<div id="yui_3_16_0_1_1527609077199_2859">
<p class="MsoNormal" style="background:white"><span style="font-size:10.0pt;font-family:"Helvetica",sans-serif;color:black">-Bob<br>
<br>
<o:p></o:p></span></p>
</div>
<div id="yui_3_16_0_1_1527609077199_2754">
<div id="yui_3_16_0_1_1527609077199_2753">
<p class="MsoNormal" style="margin-bottom:12.0pt;background:white"><span style="font-size:10.0pt;font-family:"Helvetica",sans-serif;color:black">--<br>
Bob Lamothe<br>
<a href="mailto:robert_lamothe@yahoo.com">robert_lamothe@yahoo.com</a><br>
KB1BOB<br>
603-918-6336<o:p></o:p></span></p>
</div>
</div>
</div>
</div>
</div>
</blockquote>
<blockquote type="cite">
<div><span>-- </span><br>
<span>For Consortium Member technical support, see <a href="https://wiki.shibboleth.net/confluence/x/coFAAg">
https://wiki.shibboleth.net/confluence/x/coFAAg</a></span><br>
<span>To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">
users-unsubscribe@shibboleth.net</a></span></div>
</blockquote>
</div>
</body>
</html>