<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">Hey everyone,<div class=""><span class="Apple-tab-span" style="white-space:pre"> </span>I’m trying to set up Shibboleth to send my ldap mail attribute as the NameID. I have done this numerous times in the past, (Duo, Google, etc). I am on Shib 4.2.1</div><div class=""><br class=""></div><div class="">I’m trying to do this for another service I have, and its just not picking it up. It's still setting it to that transient value instead of the email address.</div><div class=""><br class=""></div><div class="">This is what I see when I am looking at the SAML Tracer</div><div class=""><br class=""></div><div class=""><saml2:NameID Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient" NameQualifier="<a href="https://ouridp.manhattan.edu/idp/shibboleth" class="">https://ouridp.manhattan.edu/idp/shibboleth</a>" SPNameQualifier="<a href="https://newservice.manhattan.edu" class="">https://newservice.manhattan.edu</a>" >AAdzZWNyZXQxnM6TnkY/+ufCfBrZwVFdw6zBuL+LUuQ+d8PP2m15ucjEG2J0ehNdxu4agkdYgt6zJRaH6su8V3tDaPwOBYYVFjNGVO3+m9EAYBrZqfLsjnCLfXANppwVvc3iEeqQiH3s9qIM5FBtuB/notE=</saml2:NameID></div><div class=""><br class=""></div><div class="">In my saml-nameid.xml</div><div class=""><br class=""></div><div class="">I have the following</div><div class=""><br class=""></div><div class=""><div style="margin: 0px; font-stretch: normal; line-height: normal; font-family: "Andale Mono"; color: rgb(47, 255, 18); background-color: rgba(0, 0, 0, 0.9);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> <bean parent="shibboleth.SAML2AttributeSourcedGenerator"</span></div><div style="margin: 0px; font-stretch: normal; line-height: normal; font-family: "Andale Mono"; color: rgb(47, 255, 18); background-color: rgba(0, 0, 0, 0.9);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> p:format="urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress"</span></div><div style="margin: 0px; font-stretch: normal; line-height: normal; font-family: "Andale Mono"; color: rgb(47, 255, 18); background-color: rgba(0, 0, 0, 0.9);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> p:attributeSourceIds="#{ {'mail'} }" ></span></div><div style="margin: 0px; font-stretch: normal; line-height: normal; font-family: "Andale Mono"; color: rgb(47, 255, 18); background-color: rgba(0, 0, 0, 0.9);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> <property name="activationCondition" ></span></div><div style="margin: 0px; font-stretch: normal; line-height: normal; font-family: "Andale Mono"; color: rgb(47, 255, 18); background-color: rgba(0, 0, 0, 0.9);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> <bean parent="shibboleth.Conditions.RelyingPartyId" c:candidate="<a href="https://newservice.manhattan.edu" class="">https://newservice.manhattan.edu</a>" /></span></div><div style="margin: 0px; font-stretch: normal; line-height: normal; font-family: "Andale Mono"; color: rgb(47, 255, 18); background-color: rgba(0, 0, 0, 0.9);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> </property></span></div><div style="margin: 0px; font-stretch: normal; line-height: normal; font-family: "Andale Mono"; color: rgb(47, 255, 18); background-color: rgba(0, 0, 0, 0.9);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> </bean></span></div></div><div class=""><br class=""></div><div class="">What am I doing wrong that it’s not picking up this one in particular but the rest work fine. For instance, the one I have above it is the Google entry and that works no problem.</div><div class=""><br class=""></div><div class="">I made sure it wasn’t in a commented section of code LOL. </div><div class=""><br class=""></div><div class="">Also, it’s entityID is: <span style="color: rgb(47, 255, 18); font-family: "Andale Mono"; background-color: rgba(0, 0, 0, 0.9);" class="">spEntityId: <a href="https://newservice.manhattan.edu" class="">https://newservice.manhattan.edu</a></span></div><div class=""><br class=""></div><div class="">Any suggestions on whats going wrong here and why my IDP is not sending back the correct NameID? Like I said, I’m really at a loss here.</div><div class=""><br class=""></div><div class="">Everything looks completely correct on my side.</div><div class=""><br class=""></div><div class="">Thanks for any assistance you may be able to offer.</div><div class=""><br class=""></div><div class=""><br class=""><div class="">
<div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; text-decoration: none;"><span style="font-size: 14px;" class=""><font color="#007236" class=""><b class="">Melvin Lasky</b><br class="">Associate Director of Enterprise Architecture</font><br class=""><br class=""></span></div><span><img apple-inline="yes" id="EB017286-5246-4DB0-BCDB-1346C8577894" src="cid:30040C3B-58F3-41D0-91CF-B57E6B6E2FB7@manhattan.edu" class=""></span><div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; text-decoration: none;"><span style="font-size: 14px;" class=""><br class=""><br class=""><br class="">Riverdale, NY 10471<br class="">Phone: 718-862-7410<br class=""><a href="mailto:melvin.lasky@manhattan.edu" class="">melvin.lasky@manhattan.edu</a><br class="">www.manhattan.edu</span><br class=""><br class=""></div>
</div>
<br class=""></div></body></html>