<div dir="ltr">Hello,<div>Does anyone have any experience working with the SP ADP? They are IDP initiated so unlike all our other SP's that give us the URL to hit and that initiates the request to us, the users hit the IDP first and then pushes to the SP.  I have that part working. Where I'm having trouble is understanding 2 pieces of information they need to make this work. </div><div><br></div><div>One is the attribute type that they require. They call it "PersonImmutableID". I have that being populated with the correct information Employee number as agreed upon but their side views it as null. Is there something I need to do to make that attribute immutable?  Here is how I have it defined in attribute-resolver.xml file: </div>





<p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:11px;line-height:normal;font-family:Menlo;color:rgb(180,36,25)"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"><AttributeDefinition </span><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">xsi</span><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(64,11,217)">:</span><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">type</span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">=</span><span class="gmail-s5" style="font-variant-ligatures:no-common-ligatures">"Simple"</span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"> </span><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">id</span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">=</span><span class="gmail-s5" style="font-variant-ligatures:no-common-ligatures">"PersonImmutableID"</span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)">></span></p>
<p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:11px;line-height:normal;font-family:Menlo;color:rgb(180,36,25)"><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)"><span class="gmail-Apple-converted-space">        </span></span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"><InputDataConnector </span><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">ref</span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">=</span><span class="gmail-s5" style="font-variant-ligatures:no-common-ligatures">"myLDAP"</span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"> </span><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">attributeNames</span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">=</span><span class="gmail-s5" style="font-variant-ligatures:no-common-ligatures">"employeeNumber"</span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)">/></span></p>
<p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:11px;line-height:normal;font-family:Menlo;color:rgb(180,36,25)"><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)"><span class="gmail-Apple-converted-space">        </span></span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"><AttributeEncoder </span><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">xsi</span><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(64,11,217)">:</span><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">type</span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">=</span><span class="gmail-s5" style="font-variant-ligatures:no-common-ligatures">"SAML1String"</span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"> </span><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">name</span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">=</span><span class="gmail-s5" style="font-variant-ligatures:no-common-ligatures">"urn:mace:dir:attribute-def:employeeNumber"</span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"> /></span></p>
<p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:11px;line-height:normal;font-family:Menlo;color:rgb(180,36,25)"><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)"><span class="gmail-Apple-converted-space">        </span></span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"><AttributeEncoder </span><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">xsi</span><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(64,11,217)">:</span><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">type</span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">=</span><span class="gmail-s5" style="font-variant-ligatures:no-common-ligatures">"SAML2String"</span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"> </span><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">name</span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">=</span><span class="gmail-s5" style="font-variant-ligatures:no-common-ligatures">"urn:oid:2.16.840.1.113730.3.1.3"</span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"> </span><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">friendlyName</span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">=</span><span class="gmail-s5" style="font-variant-ligatures:no-common-ligatures">"employeeNumber"</span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"> /></span></p>
<div><span class="gmail-s4" style="font-family:Menlo;font-size:11px;font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)"><span class="gmail-Apple-converted-space">    </span></span><span class="gmail-s5" style="color:rgb(46,174,187);font-family:Menlo;font-size:11px;font-variant-ligatures:no-common-ligatures"></AttributeDefinition></span></div><div><br></div><div>The second part is what they call the "Relay State" url. They provided a URL labeled Relay State but I'm not sure how to configure it . They are checking for that in the response they receive. In my relying-party.xml, I have to configure a url that is labeled "Audience" That is what creates the handshake between them and us. We know our communication is making it to them because it hits their server logs and all the other handshake checks are correct except these two.</div><div><br></div><div>Thanks  </div><div><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><p><span style="font-family:Arial,sans-serif;color:rgb(31,73,125)"><font size="1">Steve Herrera<br></font></span><span style="font-family:Arial,sans-serif;color:rgb(31,73,125)"><font size="1">System Administration<br><br></font></span><u><span style="font-size:7.5pt;font-family:"Arial","sans-serif";color:blue"></span></u></p></div></div></div></div>