<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><br class=""><div><br class=""><blockquote type="cite" class=""><div class="">On Mar 1, 2021, at 2:54 PM, Jeffrey Williams via users <<a href="mailto:users@shibboleth.net" class="">users@shibboleth.net</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div dir="ltr" class="">I have this running in our val environment and ran into that error in the past. For us, it was having to do with Shib not being configured to parse the returned attribute to be used to poll your attribute source.<div class=""><br class=""></div><div class="">For starters, confirm that you have the c14n/attribute bean uncommented in conf/c14n/subject-c14n.xml. I don't think that's expressly given in the docs.</div><div class=""><br class=""></div><div class="">-Jeff</div></div><br class=""><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Mon, Mar 1, 2021 at 2:33 PM Goggins, Patrick via users <<a href="mailto:users@shibboleth.net" class="">users@shibboleth.net</a>> wrote:<br class=""></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div lang="EN-US" class="">
<div class="gmail-m_-4102916622089996434WordSection1"><p class="MsoNormal" style="margin-bottom:12pt">Building up a new Shib v4.0.1 IdP (under WS2019) utilizing Azure AD for a hybrid release.<u class=""></u><u class=""></u></p><p class="MsoNormal" style="margin-bottom:12pt">Finished running through the documentation steps a few days ago but running into some issues with crosswalk mapping. I’ve enabled SAML debugging to isolate the issue but not sure where the adjustment needs to
be made.</p></div></div></blockquote></div></div></blockquote></div><div class=""><br class=""></div>Anybody doing this should read the excellent page that Chris Phillips and the Canadian Access Federation added to the Shib wiki about doing this:<div class=""><br class=""></div><div class=""> <a href="https://wiki.shibboleth.net/confluence/display/KB/Using+SAML+Proxying+in+the+Shibboleth+IdP+to+connect+with+Azure+AD" class="">https://wiki.shibboleth.net/confluence/display/KB/Using+SAML+Proxying+in+the+Shibboleth+IdP+to+connect+with+Azure+AD</a></div><div class=""><br class=""></div><div class="">I was going to write up a page, but they pointed me to the work they had in progress, and it really covers everything you need to know and be aware of when doing this.</div><div class=""><br class=""><div class="">
<div>--<br class="">Michael A. Grady<br class="">IAM Architect, Unicon, Inc.</div><div class=""><br class=""></div><br class="Apple-interchange-newline">
</div>
<br class=""></div></body></html>