<div dir="ltr">Hello,<div><br></div><div>I am having some issues setting up SSO for a vendor named Graduway.</div><div><br></div><div>On saml tracer it doesn't seem to be sending them the attributes that I set up in attribute-filter.xml:</div><div><br></div><div><AttributeFilterPolicy id="releaseForGraduway" ><br> <PolicyRequirementRule xsi:type="RequesterRegex" regex="https:\/\/.*\.*\.*\.*\.<a href="http://graduway.com">graduway.com</a>\/.*" /><br> <AttributeRule attributeID="eduPersonPrincipalName"><br> <PermitValueRule xsi:type="ANY" /> <br> </AttributeRule><br> <AttributeRule attributeID="mail"><br> <PermitValueRule xsi:type="ANY" /><br> </AttributeRule><br> <AttributeRule attributeID="givenName"><br> <PermitValueRule xsi:type="ANY" /><br> </AttributeRule><br> <AttributeRule attributeID="surname"><br> <PermitValueRule xsi:type="ANY" /><br> </AttributeRule><br></AttributeFilterPolicy><br></div><div><br></div><div>I have encrypt assertions turned off:</div><div> <bean parent="RelyingPartyByName" c:relyingPartyIds="graduway"><br> <property name="profileConfigurations"><br> <list><br> <bean parent="SAML2.SSO" p:encryptAssertions="false" /><br> </list><br> </property><br> </bean><br></div><div><br></div><div>metadata-providers.xml:</div><div> <MetadataProvider id="GRADUWAY" xsi:type="FilesystemMetadataProvider" metadataFile="%{idp.home}/metadata/graduway.xml"/><br></div><div><div><br></div><div>graduway.xml:</div><div><p style="margin:0px;font-stretch:normal;font-size:12px;line-height:normal;font-family:"Andale Mono";font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal;color:rgb(47,255,18);background-color:rgba(0,0,0,0.9)"><span style="font-variant-ligatures:no-common-ligatures"><EntityDescriptor cacheDuration="PT1H" entityID="<entity_id_url>" xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion" xmlns="urn:oasis:names:tc:SAML:2.0:metadata"><SPSSODescriptor AuthnRequestsSigned="false" WantAssertionsSigned="false" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol"><AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="<entity_id_url>" isDefault="true" index="0" /><AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="<entity_id_url>" isDefault="false" index="1" /><AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="<entity_id_url>" isDefault="false" index="2" /><AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="<entity_id_url>" isDefault="false" index="3" /></SPSSODescriptor></EntityDescriptor></span></p>
<br class="gmail-Apple-interchange-newline"></div><div>This is the error I see in SAML tracer:</div><div><br></div><div><span style="color:rgb(68,68,68);font-family:Consolas,"Lucida Console",Courier,monospace;font-size:10.6667px;font-variant-ligatures:normal;text-decoration-style:initial;text-decoration-color:initial"> </span><span class="gmail-hljs-tag" style="color:rgb(220,45,37);font-family:Consolas,"Lucida Console",Courier,monospace;font-size:10.6667px;font-variant-ligatures:normal;text-decoration-style:initial;text-decoration-color:initial"><<span class="gmail-hljs-name" style="color:rgb(0,116,232)">saml2p:Status</span>></span><span style="color:rgb(68,68,68);font-family:Consolas,"Lucida Console",Courier,monospace;font-size:10.6667px;font-variant-ligatures:normal;text-decoration-style:initial;text-decoration-color:initial">
</span><span class="gmail-hljs-tag" style="color:rgb(220,45,37);font-family:Consolas,"Lucida Console",Courier,monospace;font-size:10.6667px;font-variant-ligatures:normal;text-decoration-style:initial;text-decoration-color:initial"><<span class="gmail-hljs-name" style="color:rgb(0,116,232)">saml2p:StatusCode</span> <span class="gmail-hljs-attr" style="color:rgb(221,0,169)">Value</span>=<span class="gmail-hljs-string" style="color:rgb(0,62,170)">"urn:oasis:names:tc:SAML:2.0:status:Responder"</span> /></span><span style="color:rgb(68,68,68);font-family:Consolas,"Lucida Console",Courier,monospace;font-size:10.6667px;font-variant-ligatures:normal;text-decoration-style:initial;text-decoration-color:initial">
</span><span class="gmail-hljs-tag" style="color:rgb(220,45,37);font-family:Consolas,"Lucida Console",Courier,monospace;font-size:10.6667px;font-variant-ligatures:normal;text-decoration-style:initial;text-decoration-color:initial"><<span class="gmail-hljs-name" style="color:rgb(0,116,232)">saml2p:StatusMessage</span>></span><span style="color:rgb(68,68,68);font-family:Consolas,"Lucida Console",Courier,monospace;font-size:10.6667px;font-variant-ligatures:normal;text-decoration-style:initial;text-decoration-color:initial">An error occurred.</span><span class="gmail-hljs-tag" style="color:rgb(220,45,37);font-family:Consolas,"Lucida Console",Courier,monospace;font-size:10.6667px;font-variant-ligatures:normal;text-decoration-style:initial;text-decoration-color:initial"></<span class="gmail-hljs-name" style="color:rgb(0,116,232)">saml2p:StatusMessage</span>></span><span style="color:rgb(68,68,68);font-family:Consolas,"Lucida Console",Courier,monospace;font-size:10.6667px;font-variant-ligatures:normal;text-decoration-style:initial;text-decoration-color:initial">
</span><span class="gmail-hljs-tag" style="color:rgb(220,45,37);font-family:Consolas,"Lucida Console",Courier,monospace;font-size:10.6667px;font-variant-ligatures:normal;text-decoration-style:initial;text-decoration-color:initial"></<span class="gmail-hljs-name" style="color:rgb(0,116,232)">saml2p:Status</span>></span></div><div><br></div><div>Auth logs:</div><div>
<p style="margin:0px;font-stretch:normal;font-size:12px;line-height:normal;font-family:"Andale Mono";font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal;color:rgb(47,255,18);background-color:rgba(0,0,0,0.9)"><span style="font-variant-ligatures:no-common-ligatures">shib-idp;idp-process.log;dev;nothing; - [10.0.0.0]2024-07-23 20:02:22,802 - INFO [Shibboleth-Audit.SSO:338] - 2024-07-23T20:02:22.802073Z|urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect|idaa21fd7db0d14dfa9555524d77cad219|<a href="https://api.prod.us-east1.manual.graduway.com/Saml2|http://shibboleth.net/ns/profiles/saml2/sso/browser|https://">https://api.prod.us-east1.manual.graduway.com/Saml2|http://shibboleth.net/ns/profiles/saml2/sso/browser|https://</a><some_url>/idp/shibboleth|urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST|_05e22dd43dc51fb8e7ba2ff55715e605||||||</span></p>
</div><div><br></div><div>Any help would be greatly appreciated.</div><div><br></div><div>Thank you,</div><div>Alberto</div><div><br></div><span class="gmail_signature_prefix">-- </span><br><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div style="font-size:small"><span style="font-weight:bolder;color:rgb(57,57,57);font-family:Georgia,sans-serif;font-size:14px"><span style="color:rgb(4,106,56)">Alberto DeAngelis</span></span><span style="color:rgb(4,106,56);font-family:Georgia,sans-serif;font-size:14px;font-weight:700"> '20 '22</span><br style="color:rgb(57,57,57);font-family:Georgia,sans-serif;font-size:14px"><i style="color:rgb(4,106,56);font-family:Georgia,sans-serif;font-size:14px">Database Administrator</i><span style="color:rgb(4,106,56);font-family:Georgia,sans-serif;font-size:14px"><i><br>Information Technology Services</i></span><span style="color:rgb(57,57,57);font-family:Georgia,sans-serif;font-size:14px"></span><br style="color:rgb(57,57,57);font-family:Georgia,sans-serif;font-size:14px"><img src="https://content.manhattan.edu/nav-files/mc-logo_green.png" alt="Manhattan College Logo/Shield" style="vertical-align:middle;border-style:none;color:rgb(57,57,57);font-family:Georgia,sans-serif;font-size:14px;width:170px;height:54px"><span style="color:rgb(57,57,57);font-family:Georgia,sans-serif;font-size:14px"></span><br style="color:rgb(57,57,57);font-family:Georgia,sans-serif;font-size:14px"><span style="color:rgb(57,57,57);font-family:Georgia,sans-serif;font-size:14px">Riverdale, NY 10471</span><br style="color:rgb(57,57,57);font-family:Georgia,sans-serif;font-size:14px"><a href="mailto:adeangelis01@manhattan.edu" style="color:rgb(50,98,149);background-color:transparent;line-height:inherit;font-family:Georgia,sans-serif;font-size:14px" target="_blank">adeangelis01@manhattan.edu</a><span style="color:rgb(57,57,57);font-family:Georgia,sans-serif;font-size:14px"></span><br style="color:rgb(57,57,57);font-family:Georgia,sans-serif;font-size:14px"><a href="http://www.manhattan.edu/" style="color:rgb(50,98,149);background-color:transparent;line-height:inherit;font-family:Georgia,sans-serif;font-size:14px" target="_blank">www.manhattan.edu</a><br></div></div></div></div></div></div></div></div></div>