<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body style="overflow-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;"><div><blockquote type="cite"><div><div><div style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><div>Thanks for your reply,</div></div></div></div></blockquote><span style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0);"><div><span style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0);"><br></span></div>Of course!</span><br id="lineBreakAtBeginningOfMessage" style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0);"><br><blockquote type="cite"><div><div><div style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><div>For one field ("mail") , i'v relase/comment the call on my attribute-resolver.xml (it's the right thing ?)<br data-mce-bogus="1"></div><div>so for the moment i want test with only mail ..<br data-mce-bogus="1"></div><div></div></div></div></div></blockquote><div><br></div><div>I assume this is uncommented in your actual resolver, or it would certainly be your problem.</div><br><blockquote type="cite"><div><div><div style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><div><!--<br data-mce-bogus="1"></div><div> <!--StartFragment--> <AttributeDefinition id="mail" xsi:type="Template"><br> <InputAttributeDefinition ref="uid" /><br> <Template><br> <![CDATA[<br> ${uid}@%{idp.scope}<br> ]]><br> </Template><br> </AttributeDefinition><br><!--EndFragment-->--></div><div>--<br data-mce-bogus="1"></div><div><br data-mce-bogus="1"></div><div>And add this 2 beans at the end of <!--StartFragment--> <em data-renderer-mark="true">saml-nameid.xml</em></div></div></div></div></blockquote><div><br></div><br><blockquote type="cite"><div><div><div style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><div><!-- SAML 2 NameID Generation --><br> <util:list id="shibboleth.SAML2NameIDGenerators"><br> <ref bean="shibboleth.SAML2TransientGenerator" /><br> <!-- Uncommenting this bean requires configuration in saml-nameid.properties. --><br> <!-- <ref bean="shibboleth.SAML2PersistentGenerator" /> --><br> <bean parent="shibboleth.SAML2AttributeSourcedGenerator"<br> p:omitQualifiers="true"<br> p:format="urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress"<br> p:attributeSourceIds="#{ {'mail'} }" /><br> </util:list><br><br> <!-- SAML 1 NameIdentifier Generation --><br> <util:list id="shibboleth.SAML1NameIdentifierGenerators"><br> <ref bean="shibboleth.SAML1TransientGenerator" /><br> <bean parent="shibboleth.SAML1AttributeSourcedGenerator"<br> p:omitQualifiers="true"<br> p:format="urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress"<br> p:attributeSourceIds="#{ {'mail'} }" /><br> </util:list></div></div></div></div></blockquote><div><br></div><div>These are fine, but they don’t define an encoder for unspecified. The end of the format strings is emailAddress instead. If your application is requesting unspecified, you’ll want to fix that.</div><br><blockquote type="cite"><div><div><div style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><div><span style="font-size: 12pt;">after uncomment this on saml-nameid.properties :</span></div><div><div>idp.nameid.saml2.default = urn:oasis:names:tc:SAML:2.0:nameid-format:transient</div><div><br></div><!--EndFragment--> </div><div>If on <!--StartFragment--> <em data-renderer-mark="true">saml-nameid.xml</em><!--EndFragment--> </div><div> i uncomment the ref bean : <!--StartFragment--><ref bean="shibboleth.SAML2PersistentGenerator" /><!--EndFragment--> </div><div><br data-mce-bogus="1"></div><div><br></div><div>2024-02-07 15:58:52,810 - - WARN [net.shibboleth.ext.spring.context.FilesystemGenericApplicationContext:591] - Exception encountered during context initialization - cancelling refresh attempt: org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'shibboleth.SAML2NameIDGenerators': Cannot resolve reference to bean 'shibboleth.SAML2PersistentGenerator' while setting bean property 'sourceList' with key [1]; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'shibboleth.SAML2PersistentGenerator' defined in class path resource [net/shibboleth/idp/conf/saml-nameid-system.xml]: Cannot resolve reference to bean '#{'shibboleth.ComputedPersistentIdGenerator'.trim()}' while setting bean property 'persistentIdStore'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'shibboleth.ComputedPersistentIdGenerator' defined in class path resource [net/shibboleth/idp/conf/saml-nameid-system.xml]: Invocation of init method failed; nested exception is net.shibboleth.utilities.java.support.component.ComponentInitializationException: Global salt and salt lookup strategy cannot both be null<br></div></div></div></div></blockquote><div><br></div><div>You’ll need to set up a salt before you can use persistent ID’s, but that’s orthogonal to the apparent issue. The other errors are derived from this one, but again, not directly relevant. I would ignore persistent ID’s for now.</div><br><blockquote type="cite"><div><div><div><div><font face="arial, helvetica, sans-serif" size="3">upn_sent_by_idp : "AAdzZWNyZXQxZeIj7ngxkWk5Tj4m3bop3J9JiSA+Z3DytGzRR4ETuJVZB2h2AsfLXU31s+sl9+tcytAvR+PDBoGQ+TWFFnYDRfxUV3+BnnjBL85/Z0MhMOMMT0JYSuKXEVolm3rboSS5n1XRACMzbhaNKWZEFGzfHBWxxkA6w==“ </font></div></div></div></div></blockquote><blockquote type="cite"><div><div><div style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><div><pre><span style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Wich logs can i give you .. Sp Logs ? IDP Logs ?</span></pre></div></div></div></div></blockquote><div><br></div><div>We need the IdP’s logs on DEBUG. It will explain exactly why it is unable or unwilling to generate an unspecified NameID.</div><div><br></div></div>Best regards,<div>Nate</div></body></html>