<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
<style type="text/css" style="display:none;"><!-- P {margin-top:0;margin-bottom:0;} --></style>
</head>
<body dir="ltr">
<div id="divtagdefaultwrapper" style="font-size:11pt;color:#000000;font-family:Calibri,Helvetica,sans-serif;" dir="ltr">
<p style="margin-top:0;margin-bottom:0">Hi Dennis,</p>
<p style="margin-top:0;margin-bottom:0"><br>
</p>
<p style="margin-top:0;margin-bottom:0">The "name" attribute on the entry in your attribute-map.xml file needs to exactly match what the desired attribute is being encoded as in the SAML assertion. In the config listed below, you're encoding the attribute as
"eppn" but trying to capture it as "<span>urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified</span>".</p>
<p style="margin-top:0;margin-bottom:0"><br>
</p>
<p style="margin-top:0;margin-bottom:0">Michael<br>
</p>
</div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> users <users-bounces@shibboleth.net> on behalf of O'Quinn, Dennis <DENNIS_OQUINN@homedepot.com><br>
<b>Sent:</b> Monday, June 11, 2018 1:17:36 PM<br>
<b>To:</b> Shib Users<br>
<b>Subject:</b> unable to capture eppn information from SAML2/POST at SP</font>
<div> </div>
</div>
<meta content="text/html; charset=Windows-1252">
<meta name="x_Generator" content="Microsoft Word 15 (filtered medium)">
<style>
<!--
@font-face
{font-family:Wingdings}
@font-face
{font-family:"Cambria Math"}
@font-face
{font-family:Calibri}
@font-face
{font-family:Cambria}
@font-face
{font-family:Stencil}
@font-face
{font-family:Perpetua}
@font-face
{font-family:Webdings}
p.x_MsoNormal, li.x_MsoNormal, div.x_MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif}
a:x_link, span.x_MsoHyperlink
{color:#0563C1;
text-decoration:underline}
a:x_visited, span.x_MsoHyperlinkFollowed
{color:#954F72;
text-decoration:underline}
span.x_EmailStyle17
{font-family:"Calibri",sans-serif;
color:windowtext}
.x_MsoChpDefault
{}
@page WordSection1
{margin:1.0in 1.0in 1.0in 1.0in}
div.x_WordSection1
{}
-->
</style>
<div lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="x_WordSection1">
<p class="x_MsoNormal">Hi, having trouble figuring out how to map the desired value from the SAMLResponse in Shibboleth.</p>
<p class="x_MsoNormal"> </p>
<p class="x_MsoNormal">I have my IdP returning:</p>
<p class="x_MsoNormal"><SAMLResponse></p>
<p class="x_MsoNormal">.</p>
<p class="x_MsoNormal">.</p>
<p class="x_MsoNormal">.</p>
<p class="x_MsoNormal"> <saml:Assertion ID="teAnsub-RcnQBOVPwdN_64zAz62" IssueInstant="2018-06-11T17:56:31.648Z" Version="2.0" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion"></p>
<p class="x_MsoNormal"> <saml:Issuer>https://devsaml.homedepot.com</saml:Issuer></p>
<p class="x_MsoNormal"> <saml:Subject></p>
<p class="x_MsoNormal"> <saml:NameID Format="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified">dxo5ic1</saml:NameID></p>
<p class="x_MsoNormal"> <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer"></p>
<p class="x_MsoNormal"> <saml:SubjectConfirmationData Recipient="https://sascloud.homedepot.com/Shibboleth.sso/SAML2/POST" NotOnOrAfter="2018-06-11T18:11:31.648Z" InResponseTo="_0aa24f12eb976fcc40d3cfd08077b0d3"/></p>
<p class="x_MsoNormal"> </saml:SubjectConfirmation></p>
<p class="x_MsoNormal"> </saml:Subject></p>
<p class="x_MsoNormal"> <span lang="FR"><saml:Conditions NotBefore="2018-06-11T17:46:31.648Z" NotOnOrAfter="2018-06-11T18:11:31.648Z"></span></p>
<p class="x_MsoNormal"><span lang="FR"> <saml:AudienceRestriction></span></p>
<p class="x_MsoNormal"><span lang="FR"> <saml:Audience>https://sascloud.homedepot.com/shibboleth</saml:Audience></span></p>
<p class="x_MsoNormal"><span lang="FR"> </saml:AudienceRestriction></span></p>
<p class="x_MsoNormal"><span lang="FR"> </saml:Conditions></span></p>
<p class="x_MsoNormal"><span lang="FR"> <saml:AuthnStatement SessionIndex="teAnsub-RcnQBOVPwdN_64zAz62" AuthnInstant="2018-06-11T17:56:31.648Z"></span></p>
<p class="x_MsoNormal"><span lang="FR"> <saml:AuthnContext></span></p>
<p class="x_MsoNormal"><span lang="FR"> <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport</saml:AuthnContextClassRef></span></p>
<p class="x_MsoNormal"><span lang="FR"> </saml:AuthnContext></span></p>
<p class="x_MsoNormal"><span lang="FR"> </span></saml:AuthnStatement></p>
<p class="x_MsoNormal"> <saml:AttributeStatement></p>
<p class="x_MsoNormal">******************************************************************************************************************************</p>
<p class="x_MsoNormal"> <saml:Attribute Name="eppn" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified"></p>
<p class="x_MsoNormal"> <saml:AttributeValue xsi:type="xs:string" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">dxo5ic1</saml:AttributeValue></p>
<p class="x_MsoNormal"> </saml:Attribute></p>
<p class="x_MsoNormal">******************************************************************************************************************************</p>
<p class="x_MsoNormal"> </saml:AttributeStatement></p>
<p class="x_MsoNormal"> </saml:Assertion></p>
<p class="x_MsoNormal"> </samlp:Response></p>
<p class="x_MsoNormal"></SAMLResponse></p>
<p class="x_MsoNormal"> </p>
<p class="x_MsoNormal">I have tried numerous mapping statements in my attribute-map.xml, but, I can get nothing trapped and recorded in the transaction log as ‘cached’ nor is my application detecting the information I am hoping to pass to it.</p>
<p class="x_MsoNormal"> </p>
<p class="x_MsoNormal">I have simplified my attribute map to the following:</p>
<p class="x_MsoNormal"><Attributes xmlns="urn:mace:shibboleth:2.0:attribute-map"</p>
<p class="x_MsoNormal"> xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"</p>
<p class="x_MsoNormal"> xsi:schemaLocation="urn:mace:shibboleth:2.0:attribute-map</p>
<p class="x_MsoNormal"> /usr/share/xml/shibboleth/shibboleth-2.0-attribute-map.xsd"</p>
<p class="x_MsoNormal"> REMOTE_USER="eppn"></p>
<p class="x_MsoNormal"> </p>
<p class="x_MsoNormal"> <Attribute name="urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified" id="eppn"></p>
<p class="x_MsoNormal" style="text-indent:.5in"><AttributeDecoder xsi:type="StringAttributeDecoder" caseSensitive="true"/></p>
<p class="x_MsoNormal"> </Attribute></p>
<p class="x_MsoNormal"></Attributes></p>
<p class="x_MsoNormal"> </p>
<p class="x_MsoNormal">Can someone advise me on what I am missing here and why I can’t seem to trap the eppn value (which I am hoping will populate REMOTE_USER in the headers)….</p>
<p class="x_MsoNormal"> </p>
<p class="x_MsoNormal">NOTE: I am using the following in my Apache conf to rewrite the header from REMOTE_USER to x-Remote-User for the application….</p>
<p class="x_MsoNormal"><Location /SASLogon/login></p>
<p class="x_MsoNormal"> AuthType shibboleth</p>
<p class="x_MsoNormal"> ShibRequestSetting requireSession 1</p>
<p class="x_MsoNormal"> require valid-user</p>
<p class="x_MsoNormal"> RewriteEngine On</p>
<p class="x_MsoNormal"> RewriteCond %{LA-U:REMOTE_USER} (.+)</p>
<p class="x_MsoNormal"> RewriteRule . - [E=RU:%1]</p>
<p class="x_MsoNormal"> RequestHeader set X-Remote-User "%{RU}e" env=RU</p>
<p class="x_MsoNormal"></Location></p>
<p class="x_MsoNormal"> </p>
<p class="x_MsoNormal">Thanks in advance, Dennis</p>
<p class="x_MsoNormal"> </p>
<p class="x_MsoNormal"><b><span style="font-size:10.0pt; font-family:"Cambria",serif; color:#1F497D">Dennis O’Quinn | EDW Infrastructure Engineering | NAE115H @ 2250 MTC</span></b><b><span style="font-family:"Perpetua",serif; color:#1F497D"></span></b></p>
<p class="x_MsoNormal"><span style="font-size:9.0pt; font-family:Stencil; color:#FF8000">The Home Depot</span><span style="font-size:8.0pt; font-family:Stencil; color:#FF8000">
</span><span style="font-size:8.0pt; font-family:"Arial",sans-serif; color:#1F497D">|</span><span style="font-size:8.0pt; font-family:"Arial",sans-serif; color:gray">
</span><b><span style="font-size:9.0pt; font-family:"Cambria",serif; color:#C45911">M</span></b><span style="font-size:9.0pt; font-family:"Cambria",serif; color:#1F497D">arietta</span><span style="font-size:9.0pt; font-family:"Cambria",serif; color:gray">
</span><b><span style="font-size:9.0pt; font-family:"Cambria",serif; color:#C45911">T</span></b><span style="font-size:9.0pt; font-family:"Cambria",serif; color:#1F497D">echnology</span><span style="font-size:9.0pt; font-family:"Cambria",serif; color:gray">
</span><b><span style="font-size:9.0pt; font-family:"Cambria",serif; color:#C45911">C</span></b><span style="font-size:9.0pt; font-family:"Cambria",serif; color:#1F497D">enter</span><span style="font-size:8.0pt; font-family:"Cambria",serif; color:#1F497D">
| </span><span style="font-size:9.0pt; font-family:"Cambria",serif; color:#1F497D">2250 Newmarket Parkway</span><span style="font-size:8.0pt; font-family:"Cambria",serif; color:#1F497D"> |
</span><span style="font-size:9.0pt; font-family:"Cambria",serif; color:#1F497D">Marietta, GA 30067</span><span style="font-size:8.0pt; font-family:"Arial",sans-serif; color:gray"></span></p>
<p class="x_MsoNormal"><span style="font-family:Wingdings; color:#FF6600">(</span><span style="font-size:10.0pt; font-family:"Arial",sans-serif; color:#FF6600">:</span><span style="font-size:8.0pt; font-family:"Arial",sans-serif; color:#5F5F5F">
</span><span style="font-size:8.0pt; font-family:"Arial",sans-serif; color:#1F497D">Direct: 470.689.4513 | Cell: 470.658.1183 | Internal: 24513</span></p>
<p class="x_MsoNormal"><span style="font-family:Wingdings; color:#FF6600">*</span><span style="font-family:"Arial",sans-serif; color:#FF6600">:
</span><span style="font-family:"Perpetua",serif; color:#44546A"><a href="mailto:doq@homedepot.com"><span style="color:#0563C1">doq@homedepot.com</span></a></span><u><span style="font-size:8.0pt; font-family:"Arial",sans-serif; color:#FF6600"></span></u></p>
<p class="x_MsoNormal"><span style="color:#44546A"><img border="0" width="91" height="80" id="x_Picture_x0020_2" alt="cid:image002.jpg@01D3A171.22570120" style="width:.9479in; height:.8333in" src="cid:image002.jpg@01D4018E.F149DAC0"></span><span style="color:#1F497D"></span></p>
<p class="x_MsoNormal"><b><span style="font-size:8.0pt; font-family:"Cambria",serif; color:#E46C0A">We make a living by what we get , We make a life by what we give.
</span></b></p>
<p class="x_MsoNormal"><span style="font-size:18.0pt; font-family:Webdings; color:#018A08">P</span><span style="font-size:7.5pt; color:#018A08"> </span><span style="font-size:7.5pt; font-family:"Arial",sans-serif; color:#018A08">
</span><b><span style="font-size:8.0pt; color:#018A08">Please consider the environment before printing this email.</span></b><span style="color:#44546A"></span></p>
<p class="x_MsoNormal"><b><i><span style="font-size:10.0pt; font-family:"Courier New""> </span></i></b></p>
<p class="x_MsoNormal"><b><i><span style="font-size:10.0pt; font-family:"Courier New""> </span></i></b></p>
<p class="x_MsoNormal"> </p>
</div>
</div>
</body>
</html>