<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Cambria;
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Stencil;
panose-1:4 4 9 5 13 8 2 2 4 4;}
@font-face
{font-family:Perpetua;
panose-1:2 2 5 2 6 4 1 2 3 3;}
@font-face
{font-family:Webdings;
panose-1:5 3 1 2 1 5 9 6 7 3;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal">Hi, having trouble figuring out how to map the desired value from the SAMLResponse in Shibboleth.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I have my IdP returning:<o:p></o:p></p>
<p class="MsoNormal"><SAMLResponse><o:p></o:p></p>
<p class="MsoNormal">.<o:p></o:p></p>
<p class="MsoNormal">.<o:p></o:p></p>
<p class="MsoNormal">.<o:p></o:p></p>
<p class="MsoNormal"> <saml:Assertion ID="teAnsub-RcnQBOVPwdN_64zAz62" IssueInstant="2018-06-11T17:56:31.648Z" Version="2.0" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion"><o:p></o:p></p>
<p class="MsoNormal"> <saml:Issuer>https://devsaml.homedepot.com</saml:Issuer><o:p></o:p></p>
<p class="MsoNormal"> <saml:Subject><o:p></o:p></p>
<p class="MsoNormal"> <saml:NameID Format="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified">dxo5ic1</saml:NameID><o:p></o:p></p>
<p class="MsoNormal"> <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer"><o:p></o:p></p>
<p class="MsoNormal"> <saml:SubjectConfirmationData Recipient="https://sascloud.homedepot.com/Shibboleth.sso/SAML2/POST" NotOnOrAfter="2018-06-11T18:11:31.648Z" InResponseTo="_0aa24f12eb976fcc40d3cfd08077b0d3"/><o:p></o:p></p>
<p class="MsoNormal"> </saml:SubjectConfirmation><o:p></o:p></p>
<p class="MsoNormal"> </saml:Subject><o:p></o:p></p>
<p class="MsoNormal"> <span lang="FR"><saml:Conditions NotBefore="2018-06-11T17:46:31.648Z" NotOnOrAfter="2018-06-11T18:11:31.648Z"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="FR"> <saml:AudienceRestriction><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="FR"> <saml:Audience>https://sascloud.homedepot.com/shibboleth</saml:Audience><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="FR"> </saml:AudienceRestriction><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="FR"> </saml:Conditions><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="FR"> <saml:AuthnStatement SessionIndex="teAnsub-RcnQBOVPwdN_64zAz62" AuthnInstant="2018-06-11T17:56:31.648Z"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="FR"> <saml:AuthnContext><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="FR"> <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport</saml:AuthnContextClassRef><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="FR"> </saml:AuthnContext><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="FR"> </span></saml:AuthnStatement><o:p></o:p></p>
<p class="MsoNormal"> <saml:AttributeStatement><o:p></o:p></p>
<p class="MsoNormal">******************************************************************************************************************************<o:p></o:p></p>
<p class="MsoNormal"> <saml:Attribute Name="eppn" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified"><o:p></o:p></p>
<p class="MsoNormal"> <saml:AttributeValue xsi:type="xs:string" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">dxo5ic1</saml:AttributeValue><o:p></o:p></p>
<p class="MsoNormal"> </saml:Attribute><o:p></o:p></p>
<p class="MsoNormal">******************************************************************************************************************************<o:p></o:p></p>
<p class="MsoNormal"> </saml:AttributeStatement><o:p></o:p></p>
<p class="MsoNormal"> </saml:Assertion><o:p></o:p></p>
<p class="MsoNormal"> </samlp:Response><o:p></o:p></p>
<p class="MsoNormal"></SAMLResponse><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I have tried numerous mapping statements in my attribute-map.xml, but, I can get nothing trapped and recorded in the transaction log as ‘cached’ nor is my application detecting the information I am hoping to pass to it.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I have simplified my attribute map to the following:<o:p></o:p></p>
<p class="MsoNormal"><Attributes xmlns="urn:mace:shibboleth:2.0:attribute-map"<o:p></o:p></p>
<p class="MsoNormal"> xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"<o:p></o:p></p>
<p class="MsoNormal"> xsi:schemaLocation="urn:mace:shibboleth:2.0:attribute-map<o:p></o:p></p>
<p class="MsoNormal"> /usr/share/xml/shibboleth/shibboleth-2.0-attribute-map.xsd"<o:p></o:p></p>
<p class="MsoNormal"> REMOTE_USER="eppn"><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"> <Attribute name="urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified" id="eppn"><o:p></o:p></p>
<p class="MsoNormal" style="text-indent:.5in"><AttributeDecoder xsi:type="StringAttributeDecoder" caseSensitive="true"/><o:p></o:p></p>
<p class="MsoNormal"> </Attribute><o:p></o:p></p>
<p class="MsoNormal"></Attributes><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Can someone advise me on what I am missing here and why I can’t seem to trap the eppn value (which I am hoping will populate REMOTE_USER in the headers)….<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">NOTE: I am using the following in my Apache conf to rewrite the header from REMOTE_USER to x-Remote-User for the application….<o:p></o:p></p>
<p class="MsoNormal"><Location /SASLogon/login><o:p></o:p></p>
<p class="MsoNormal"> AuthType shibboleth<o:p></o:p></p>
<p class="MsoNormal"> ShibRequestSetting requireSession 1<o:p></o:p></p>
<p class="MsoNormal"> require valid-user<o:p></o:p></p>
<p class="MsoNormal"> RewriteEngine On<o:p></o:p></p>
<p class="MsoNormal"> RewriteCond %{LA-U:REMOTE_USER} (.+)<o:p></o:p></p>
<p class="MsoNormal"> RewriteRule . - [E=RU:%1]<o:p></o:p></p>
<p class="MsoNormal"> RequestHeader set X-Remote-User "%{RU}e" env=RU<o:p></o:p></p>
<p class="MsoNormal"></Location><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Thanks in advance, Dennis<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Cambria",serif;color:#1F497D">Dennis O’Quinn | EDW Infrastructure Engineering | NAE115H @ 2250 MTC</span></b><b><span style="font-family:"Perpetua",serif;color:#1F497D"><o:p></o:p></span></b></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Stencil;color:#FF8000">The Home Depot</span><span style="font-size:8.0pt;font-family:Stencil;color:#FF8000">
</span><span style="font-size:8.0pt;font-family:"Arial",sans-serif;color:#1F497D">|</span><span style="font-size:8.0pt;font-family:"Arial",sans-serif;color:gray">
</span><b><span style="font-size:9.0pt;font-family:"Cambria",serif;color:#C45911">M</span></b><span style="font-size:9.0pt;font-family:"Cambria",serif;color:#1F497D">arietta</span><span style="font-size:9.0pt;font-family:"Cambria",serif;color:gray">
</span><b><span style="font-size:9.0pt;font-family:"Cambria",serif;color:#C45911">T</span></b><span style="font-size:9.0pt;font-family:"Cambria",serif;color:#1F497D">echnology</span><span style="font-size:9.0pt;font-family:"Cambria",serif;color:gray">
</span><b><span style="font-size:9.0pt;font-family:"Cambria",serif;color:#C45911">C</span></b><span style="font-size:9.0pt;font-family:"Cambria",serif;color:#1F497D">enter</span><span style="font-size:8.0pt;font-family:"Cambria",serif;color:#1F497D"> |
</span><span style="font-size:9.0pt;font-family:"Cambria",serif;color:#1F497D">2250 Newmarket Parkway</span><span style="font-size:8.0pt;font-family:"Cambria",serif;color:#1F497D"> |
</span><span style="font-size:9.0pt;font-family:"Cambria",serif;color:#1F497D">Marietta, GA 30067</span><span style="font-size:8.0pt;font-family:"Arial",sans-serif;color:gray"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:Wingdings;color:#FF6600">(</span><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:#FF6600">:</span><span style="font-size:8.0pt;font-family:"Arial",sans-serif;color:#5F5F5F">
</span><span style="font-size:8.0pt;font-family:"Arial",sans-serif;color:#1F497D">Direct: 470.689.4513 | Cell: 470.658.1183 | Internal: 24513<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:Wingdings;color:#FF6600">*</span><span style="font-family:"Arial",sans-serif;color:#FF6600">:
</span><span style="font-family:"Perpetua",serif;color:#44546A"><a href="mailto:doq@homedepot.com"><span style="color:#0563C1">doq@homedepot.com</span></a></span><u><span style="font-size:8.0pt;font-family:"Arial",sans-serif;color:#FF6600"><o:p></o:p></span></u></p>
<p class="MsoNormal"><span style="color:#44546A"><img border="0" width="91" height="80" style="width:.9479in;height:.8333in" id="Picture_x0020_2" src="cid:image002.jpg@01D4018E.F149DAC0" alt="cid:image002.jpg@01D3A171.22570120"></span><span style="color:#1F497D"><o:p></o:p></span></p>
<p class="MsoNormal"><b><span style="font-size:8.0pt;font-family:"Cambria",serif;color:#E46C0A">We make a living by what we get , We make a life by what we give.
<o:p></o:p></span></b></p>
<p class="MsoNormal"><span style="font-size:18.0pt;font-family:Webdings;color:#018A08">P</span><span style="font-size:7.5pt;color:#018A08"> </span><span style="font-size:7.5pt;font-family:"Arial",sans-serif;color:#018A08">
</span><b><span style="font-size:8.0pt;color:#018A08">Please consider the environment before printing this email.</span></b><span style="color:#44546A"><o:p></o:p></span></p>
<p class="MsoNormal"><b><i><span style="font-size:10.0pt;font-family:"Courier New""><o:p> </o:p></span></i></b></p>
<p class="MsoNormal"><b><i><span style="font-size:10.0pt;font-family:"Courier New""><o:p> </o:p></span></i></b></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>