<div dir="ltr">Hi,<div><br></div><div>Could someone help me to extract "IssueInstant" from the SAML response in Shib SP.</div><div>In the AssertionAttributeExtractor I don't see any option to extract  "IssueInstant".</div><div><br></div><div><a href="https://wiki.shibboleth.net/confluence/display/SP3/AssertionAttributeExtractor" target="_blank">https://wiki.shibboleth.net/confluence/display/SP3/AssertionAttributeExtractor</a><br></div><div><br></div><div>Could someone guide me, how can I configure my attribute extractor for "IssueInstant".</div><div><br></div><div>Here is the example SAML response.</div><div><br></div><div><samlp:Response ID="_a4958bfd-e107-4e67-b06d-0d85ade2e76a" Version="2.0" <b>IssueInstant="2013-03-18T07:38:15.144Z"</b> Destination="<a href="https://contoso.com/identity/inboundsso.aspx" target="_blank">https://contoso.com/identity/inboundsso.aspx</a>" InResponseTo="id758d0ef385634593a77bdf7e632984b6" xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol"><br>  <Issuer xmlns="urn:oasis:names:tc:SAML:2.0:assertion"> <a href="https://login.microsoftonline.com/82869000-6ad1-48f0-8171-272ed18796e9/" target="_blank">https://login.microsoftonline.com/82869000-6ad1-48f0-8171-272ed18796e9/</a></Issuer><br>  <ds:Signature xmlns:ds="<a href="https://www.w3.org/2000/09/xmldsig#" target="_blank">https://www.w3.org/2000/09/xmldsig#</a>"><br>    ...<br>  </ds:Signature><br>  <samlp:Status><br>    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success" /><br>  </samlp:Status><br>  <Assertion ID="_bf9c623d-cc20-407a-9a59-c2d0aee84d12" <b>IssueInstant="2013-03-18T07:38:15.144Z"</b> Version="2.0" xmlns="urn:oasis:names:tc:SAML:2.0:assertion"><br>    <Issuer><a href="https://login.microsoftonline.com/82869000-6ad1-48f0-8171-272ed18796e9/" target="_blank">https://login.microsoftonline.com/82869000-6ad1-48f0-8171-272ed18796e9/</a></Issuer><br>    <ds:Signature xmlns:ds="<a href="https://www.w3.org/2000/09/xmldsig#" target="_blank">https://www.w3.org/2000/09/xmldsig#</a>"><br>      ...<br>    </ds:Signature><br>    <Subject><br>      <NameID>Uz2Pqz1X7pxe4XLWxV9KJQ+n59d573SepSAkuYKSde8=</NameID><br>      <SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer"><br>        <SubjectConfirmationData InResponseTo="id758d0ef385634593a77bdf7e632984b6" NotOnOrAfter="2013-03-18T07:43:15.144Z" Recipient="<a href="https://contoso.com/identity/inboundsso.aspx" target="_blank">https://contoso.com/identity/inboundsso.aspx</a>" /><br>      </SubjectConfirmation><br>    </Subject><br>    <Conditions NotBefore="2013-03-18T07:38:15.128Z" NotOnOrAfter="2013-03-18T08:48:15.128Z"><br>      <AudienceRestriction><br>        <Audience><a href="https://www.contoso.com/" target="_blank">https://www.contoso.com</a></Audience><br>      </AudienceRestriction><br>    </Conditions><br>    <AttributeStatement><br>      <Attribute Name="<a href="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name" target="_blank">http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name</a>"><br>        <AttributeValue><a href="mailto:testuser@contoso.com" target="_blank">testuser@contoso.com</a></AttributeValue><br>      </Attribute><br>      <Attribute Name="<a href="http://schemas.microsoft.com/identity/claims/objectidentifier" target="_blank">http://schemas.microsoft.com/identity/claims/objectidentifier</a>"><br>        <AttributeValue>3F2504E0-4F89-11D3-9A0C-0305E82C3301</AttributeValue><br>      </Attribute><br>      ...<br>    </AttributeStatement><br>    <AuthnStatement AuthnInstant="2013-03-18T07:33:56.000Z" SessionIndex="_bf9c623d-cc20-407a-9a59-c2d0aee84d12"><br>      <AuthnContext><br>        <AuthnContextClassRef> urn:oasis:names:tc:SAML:2.0:ac:classes:Password</AuthnContextClassRef><br>      </AuthnContext><br>    </AuthnStatement><br>  </Assertion><br></samlp:Response><br></div><div><br></div><div>Thank you,</div><div>Prasanth</div></div>