<div dir="ltr"><div class="gmail_default" style="font-family:garamond,serif">Thanks Nate.</div><div class="gmail_default" style="font-family:garamond,serif">I have already reached out to the IdP owners to change this, but I am not very hopeful.</div><div class="gmail_default" style="font-family:garamond,serif">Waiting to hear back from the IdP owners for now.</div><div class="gmail_default" style="font-family:garamond,serif"><br></div><div><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div dir="ltr"><div><font face="garamond, serif">Thanks and Regards,</font></div><div><font face="garamond, serif"><br></font></div><div><p style="font-size:12.8px;background-image:initial;background-position:initial;background-repeat:initial"><b><span style="font-size:12pt">Amit Dongaonkar</span></b></p><p style="font-size:12.8px;background-image:initial;background-position:initial;background-repeat:initial"><i><span style="font-size:12pt">Snr. Technical Architect Lead</span></i><i><span style="font-size:12pt"></span></i></p><p style="font-size:12.8px;background-image:initial;background-position:initial;background-repeat:initial">o: <font color="#000000">(248) 284-4035</font> m: <font color="#000000">(248) 385-6033</font></p><p style="font-size:12.8px;background-image:initial;background-position:initial;background-repeat:initial">40850 Grand River Ave #100, Novi, MI 48375</p><p style="font-size:12.8px;background-image:initial;background-position:initial;background-repeat:initial"><span style="color:rgb(17,85,204)"><a href="http://www.nitssolutions.com/" style="color:rgb(17,85,204)" target="_blank">www.nitssolutions.com</a></span></p><p style="font-size:12.8px;background-image:initial;background-position:initial;background-repeat:initial"><img border="0" width="120" height="91" src="cid:image001.png@01D29DA4.739D6D20" alt="unnamed" style="width:1.25in;height:0.9479in"></p></div></div></div></div></div></div></div></div></div></div></div></div></div><br></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Fri, Jul 16, 2021 at 1:07 PM Nate Klingenstein <<a href="mailto:ndk@signet.id">ndk@signet.id</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">Amit,<br>
<br>
While you are free to define new nameFormats in namespaces you control, under no circumstances would urn:oasis:names:tc:SAML:2.0:assertion be an acceptable name format for an attribute, since it's already used by OASIS and SAML for identifying assertion elements. it could be throwing off the parsing of the attribute.<br>
<br>
Your configuration looks fine to me, but I don't think that nameFormat will ever fly. I would consider this an IdP bug and ask them to correct that to "basic" or, if possible, a URI that matches the LDAP OID.<br>
<br>
<a href="https://docs.oasis-open.org/security/saml/v2.0/saml-core-2.0-os.pdf" rel="noreferrer" target="_blank">https://docs.oasis-open.org/security/saml/v2.0/saml-core-2.0-os.pdf</a><br>
<br>
Take care,<br>
Nate.<br>
<br>
--------<br>
Signet, Inc.<br>
The Art of Access ®<br>
<br>
<a href="https://www.signet.id" rel="noreferrer" target="_blank">https://www.signet.id</a><br>
<br>
-----Original message-----<br>
From: Amit Dongaonkar<br>
Sent: Friday, July 16 2021, 4:53 pm<br>
To: Shib Users<br>
Subject: Unable to pick up incoming attributes from the assertion<br>
<br>
Hello group,<br>
<br>
I am trying to integrate a new IdP and I see the following pattern in the attribute statement of the incoming assertion:<br>
<br>
<saml:Attribute Name="uid"<br>
NameFormat="urn:oasis:names:tc:SAML:2.0:assertion"<br>
><br>
<saml:AttributeValue xsi:type="xs:string">sankars</saml:AttributeValue><br>
</saml:Attribute><br>
<br>
My attribute-map.xml has the following corresponding configuration :<br>
<br>
<Attribute name="uid" id="USER_LOGIN_ID" nameFormat="urn:oasis:names:tc:SAML:2.0:assertion"/><br>
<br>
I am expecting the SP to capture this attribute, however, I see the following the shibd.log file<br>
<br>
INFO Shibboleth.AttributeExtractor.XML [1] [default]: skipping SAML 2.0 Attribute with Name: uid, Format:urn:oasis:names:tc:SAML:2.0:assertion<br>
<br>
Is there some other parameter that needs to be set up for the above to work?<br>
<br>
Thanks in advance.<br>
<br>
Thanks and Regards,<br>
<br>
Amit Dongaonkar<br>
<br>
--<br>
<br>
For Consortium Member technical support, see <a href="https://shibboleth.atlassian.net/wiki/x/ZYEpPw" rel="noreferrer" target="_blank">https://shibboleth.atlassian.net/wiki/x/ZYEpPw</a><br>
<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" target="_blank">users-unsubscribe@shibboleth.net</a><br>
<br>
<br>
-- <br>
For Consortium Member technical support, see <a href="https://shibboleth.atlassian.net/wiki/x/ZYEpPw" rel="noreferrer" target="_blank">https://shibboleth.atlassian.net/wiki/x/ZYEpPw</a><br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" target="_blank">users-unsubscribe@shibboleth.net</a><br>
</blockquote></div>