<div dir="ltr">Scott, thanks for your comments<div>now I understand where I went wrong.</div><div>I saved the encrypted seed value in ldap user entry and modified the attribute resolver as shown below:</div><div><br></div><div> <AttributeDefinition xsi:type="Decrypted" dataSealerRef="totp.DataSealer" id="tokenSeeds"><br> <InputDataConnector ref="ldapUnive" attributeNames="TotpSeeds"/><br> </AttributeDefinition><br><br></div><div>Now it seems to work. </div><div>I hope I haven't made any other mistake<br></div><div>Thank you</div><div><br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Mon, 7 Mar 2022 at 15:29, Cantor, Scott <<a href="mailto:cantor.2@osu.edu">cantor.2@osu.edu</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">Why are you attaching an AttributeEncoder here (or any of the rest of that stuff)? You don't seriously intend to pass this out to an SP, not to mention I think that's the name for sn (last name).<br>
<br>
I imagine the data you're sourcing isn't encrypted properly in the first place, only the log would say for sure.<br>
<br>
-- Scott<br>
<br>
<br>
-- <br>
For Consortium Member technical support, see <a href="https://shibboleth.atlassian.net/wiki/x/ZYEpPw" rel="noreferrer" target="_blank">https://shibboleth.atlassian.net/wiki/x/ZYEpPw</a><br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" target="_blank">users-unsubscribe@shibboleth.net</a><br>
</blockquote></div><br clear="all"><div><br></div>-- <br><div dir="ltr" class="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr">Giacomini Giuseppe</div><div dir="ltr">Università Ca' Foscari Venezia<br><div>ASIT- Settore Sistemi</div><div><a href="mailto:giuseppe.giacomini@unive.it" target="_blank">giuseppe.giacomini@unive.it</a></div><div>tel. 041 234 7118</div><div><br></div><div><br></div></div></div></div></div></div></div></div></div>