<html><body><div style="font-family: arial, helvetica, sans-serif; font-size: 12pt; color: #000000"><div data-marker="__QUOTED_TEXT__"><div style="font-family: arial, helvetica, sans-serif; font-size: 12pt; color: #000000"><div>I did used samlTracer in the browser, <br></div><div>and it does shows the 6 "traditionals" attributes as shid.log showed [1] <br></div><div>but none of the supann* attributes which however seemed to get sent by the IDP , as shown in idp-process.log [2] <br></div><div>anyway, I guess that samlTracer show the very end of the flow, if they are not shown in shibd.log , they would'nt in samlTracer (?) <br></div><div>I suspect that the shibd.log messages: <br></div><div><span style="font-size: 10pt;"><em><strong>unable to extract attributes, unknown XML object type: </strong></em></span></div><div><span style="font-size: 10pt;">might be the clue ? a naming pb ? attributeencoder ? <br></span></div><br><div>thanks for your help .<br></div><br><div>[1] <br></div><div><span style="font-size: 10pt;"><em><span class="Object" id="OBJ_PREFIX_DWT5011_com_zimbra_date"><span class="Object" id="OBJ_PREFIX_DWT5073_com_zimbra_date">2023-01-13</span></span> 19:46:24 DEBUG Shibboleth.AttributeFilter [2] [default]: filtering 6 attribute(s) from (<span class="Object" id="OBJ_PREFIX_DWT5012_com_zimbra_url"><span class="Object" id="OBJ_PREFIX_DWT5074_com_zimbra_url"><a target="_blank" href="https://idp4.tsp.eu/idp/shibboleth" rel="noopener">https://idp4.tsp.eu/idp/shibboleth</a></span></span>)</em></span><br><span style="font-size: 10pt;"><em><span class="Object" id="OBJ_PREFIX_DWT5013_com_zimbra_date"><span class="Object" id="OBJ_PREFIX_DWT5075_com_zimbra_date">2023-01-13</span></span> 19:46:24 DEBUG Shibboleth.AttributeFilter [2] [default]: applying filtering rule(s) for attribute (givenName) from (<span class="Object" id="OBJ_PREFIX_DWT5014_com_zimbra_url"><span class="Object" id="OBJ_PREFIX_DWT5076_com_zimbra_url"><a target="_blank" href="https://idp4.tsp.eu/idp/shibboleth" rel="noopener">https://idp4.tsp.eu/idp/shibboleth</a></span></span>)</em></span><br><span style="font-size: 10pt;"><em><span class="Object" id="OBJ_PREFIX_DWT5015_com_zimbra_date"><span class="Object" id="OBJ_PREFIX_DWT5077_com_zimbra_date">2023-01-13</span></span> 19:46:24 DEBUG Shibboleth.AttributeFilter [2] [default]: applying filtering rule(s) for attribute (displayName) from (<span class="Object" id="OBJ_PREFIX_DWT5016_com_zimbra_url"><span class="Object" id="OBJ_PREFIX_DWT5078_com_zimbra_url"><a target="_blank" href="https://idp4.tsp.eu/idp/shibboleth" rel="noopener">https://idp4.tsp.eu/idp/shibboleth</a></span></span>)</em></span><br><span style="font-size: 10pt;"><em><span class="Object" id="OBJ_PREFIX_DWT5017_com_zimbra_date"><span class="Object" id="OBJ_PREFIX_DWT5079_com_zimbra_date">2023-01-13</span></span> 19:46:24 DEBUG Shibboleth.AttributeFilter [2] [default]: applying filtering rule(s) for attribute (mail) from (<span class="Object" id="OBJ_PREFIX_DWT5018_com_zimbra_url"><span class="Object" id="OBJ_PREFIX_DWT5080_com_zimbra_url"><a target="_blank" href="https://idp4.tsp.eu/idp/shibboleth" rel="noopener">https://idp4.tsp.eu/idp/shibboleth</a></span></span>)</em></span><br><span style="font-size: 10pt;"><em><span class="Object" id="OBJ_PREFIX_DWT5019_com_zimbra_date"><span class="Object" id="OBJ_PREFIX_DWT5081_com_zimbra_date">2023-01-13</span></span> 19:46:24 DEBUG Shibboleth.AttributeFilter [2] [default]: applying filtering rule(s) for attribute (unscoped-affiliation) from (<span class="Object" id="OBJ_PREFIX_DWT5020_com_zimbra_url"><span class="Object" id="OBJ_PREFIX_DWT5082_com_zimbra_url"><a target="_blank" href="https://idp4.tsp.eu/idp/shibboleth" rel="noopener">https://idp4.tsp.eu/idp/shibboleth</a></span></span>)</em></span><br><span style="font-size: 10pt;"><em><span class="Object" id="OBJ_PREFIX_DWT5021_com_zimbra_date"><span class="Object" id="OBJ_PREFIX_DWT5083_com_zimbra_date">2023-01-13</span></span> 19:46:24 DEBUG Shibboleth.AttributeFilter [2] [default]: applying filtering rule(s) for attribute (eppn) from (<span class="Object" id="OBJ_PREFIX_DWT5022_com_zimbra_url"><span class="Object" id="OBJ_PREFIX_DWT5084_com_zimbra_url"><a target="_blank" href="https://idp4.sp.eu/idp/shibboleth" rel="noopener">https://idp4.sp.eu/idp/shibboleth</a></span></span>)</em></span><br><span style="font-size: 10pt;"><em><span class="Object" id="OBJ_PREFIX_DWT5023_com_zimbra_date"><span class="Object" id="OBJ_PREFIX_DWT5085_com_zimbra_date">2023-01-13</span></span> 19:46:24 DEBUG Shibboleth.AttributeFilter [2] [default]: applying filtering rule(s) for attribute (sn) from (<span class="Object" id="OBJ_PREFIX_DWT5024_com_zimbra_url"><span class="Object" id="OBJ_PREFIX_DWT5086_com_zimbra_url"><a target="_blank" href="https://idp4.tsp.eu/idp/shibboleth" rel="noopener">https://idp4.tsp.eu/idp/shibboleth</a></span></span>)</em></span></div><br><div><div><span style="font-size: 11pt;"><em>14Z|<strong>supannEntiteAffectation</strong>,mail,eduPersonAffiliation,displayName,givenName,eduPersonPrincipalName,sn,<strong>supannAutreMai</strong>l,<strong>supannRessourceEtat|</strong></em></span><br></div></div><br><hr id="zwchr"><div><b>De: </b>"db--- via users" <users@shibboleth.net><br><b>À: </b>"Shib Users" <users@shibboleth.net><br><b>Cc: </b>"db@alaska.edu" <dabantz@alaska.edu><br><b>Envoyé: </b>Vendredi 13 Janvier 2023 20:23:07<br><b>Objet: </b>Re: Add attributes map to SP3 (supann)<br></div><br><div>Use samlTracer in browser to know whether the attributes are actually sent, and if so, the exact names your SP needs to look for and map. (Turn off saml encryption for this test.)<br><br><div dir="ltr"><div>David.Bantz<span class="Apple-style-span" style="-webkit-composition-fill-color: rgba(175, 192, 227, 0.231373); -webkit-composition-frame-color: rgba(77, 128, 180, 0.231373); ">@Alaska.edu</span><div><span class="Apple-style-span" style="-webkit-composition-fill-color: rgba(175, 192, 227, 0.230469); -webkit-composition-frame-color: rgba(77, 128, 180, 0.230469);"><br></span></div></div></div><div dir="ltr"><br><blockquote>On Jan 13, 2023, at 10:12, Jehan PROCACCIA <jehan.procaccia@tem-tsp.eu> wrote:<br><br></blockquote></div><blockquote><div dir="ltr"><div style="font-family: arial, helvetica, sans-serif; font-size: 12pt; color: #000000"><div id="zimbraEditorContainer" style="font-family: arial, helvetica, sans-serif; font-size: 12pt; color: #000000" class="8"><div>I did restarted shibd<br>for the second most obvious pb, perhaps the IDP finally doesn't sent the attributes, although I did restarted tomcat, and in idp-process.log [1] I do see the attribute beeing mentioned (and it does resolves with aacli ) </div><div>I am lost, where should I try to resolve this problem, on the IDP side and/or SP side ? my supann* attributes seems to get lost in between <br></div><div>…</div></div></div></div></blockquote><br>-- <br>For Consortium Member technical support, see https://shibboleth.atlassian.net/wiki/x/ZYEpPw<br>To unsubscribe from this list send an email to users-unsubscribe@shibboleth.net</div></div></div><br></div></body></html>