<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div class="elementToProof" style="font-family: Arial, Helvetica, sans-serif; color: rgb(0, 0, 0);">
<span style="font-size: 12pt;">I wonder if anyone could help me troubleshoot an issue I haven't been able to understand. My Shib IdP is adding duplicate attribute values to the outgoing assertion.<br>
In the logs it appears that eduPersonScopedAffiliation has 1 value, eduPersonAffiliation has 1 value and eduPersonAssurance has 4 values.<br>
When these values are added and encoded for the assertion, they are duplicated.<br>
Where and why is this happening?<br>
<br>
</span><span style="font-size: 11pt;">*** LOGS ***</span><span style="font-size: 12pt;"><br>
</span><span style="font-family: Consolas, Courier, monospace; font-size: 11pt;">DEBUG [net.shibboleth.idp.attribute.filter.impl.AttributeFilterImpl:190] - Attribute filtering engine 'ShibbolethAttributeFilter':
</span><span style="font-family: Consolas, Courier, monospace; font-size: 11pt; background-color: rgb(255, 255, 0);">1 values for attribute 'eduPersonAffiliation'</span><span style="font-family: Consolas, Courier, monospace; font-size: 11pt;"> remained after
filtering</span></div>
<div style="font-family: Consolas, Courier, monospace; font-size: 11pt; color: rgb(0, 0, 0);">
DEBUG [net.shibboleth.idp.attribute.filter.impl.AttributeFilterImpl:190] - Attribute filtering engine 'ShibbolethAttributeFilter':
<span style="background-color: rgb(255, 255, 0);">1 values for attribute 'eduPersonScopedAffiliation'</span> remained after filtering</div>
<div style="font-family: Consolas, Courier, monospace; font-size: 11pt; color: rgb(0, 0, 0);">
DEBUG [net.shibboleth.idp.attribute.filter.impl.AttributeFilterImpl:190] - Attribute filtering engine 'ShibbolethAttributeFilter':
<span style="background-color: rgb(255, 255, 0);">4 values for attribute 'eduPersonAssurance'</span> remained after filtering</div>
<div style="font-family: Consolas, Courier, monospace; font-size: 11pt; color: rgb(0, 0, 0);">
...</div>
<div style="font-family: Consolas, Courier, monospace; font-size: 11pt; color: rgb(0, 0, 0);">
DEBUG [net.shibboleth.idp.saml.profile.impl.BaseAddAttributeStatementToAssertion:265] - Profile Action AddAttributeStatementToAssertion: Attempting to add an AttributeStatement to outgoing Assertion</div>
<div style="font-family: Consolas, Courier, monospace; font-size: 11pt; color: rgb(0, 0, 0);">
DEBUG [net.shibboleth.idp.saml.saml2.profile.impl.AddAttributeStatementToAssertion:227] - Profile Action AddAttributeStatementToAssertion: Attempting to encode attribute eduPersonAssurance as a SAML 2 Attribute</div>
<div style="font-family: Consolas, Courier, monospace; font-size: 11pt; color: rgb(0, 0, 0);">
<span style="background-color: rgb(128, 255, 128);">DEBUG [net.shibboleth.idp.saml.attribute.transcoding.SAMLEncoderSupport:73] - Encoding value https://refeds.org/assurance of attribute eduPersonAssurance</span></div>
<div style="font-family: Consolas, Courier, monospace; font-size: 11pt; color: rgb(0, 0, 0);">
<span style="background-color: rgb(128, 255, 128);">DEBUG [net.shibboleth.idp.saml.attribute.transcoding.SAMLEncoderSupport:73] - Encoding value https://refeds.org/assurance/ID/eppn-unique-reassign-1y of attribute eduPersonAssurance</span></div>
<div style="font-family: Consolas, Courier, monospace; font-size: 11pt; color: rgb(0, 0, 0);">
<span style="background-color: rgb(128, 255, 128);">DEBUG [net.shibboleth.idp.saml.attribute.transcoding.SAMLEncoderSupport:73] - Encoding value https://refeds.org/assurance/IAP/low of attribute eduPersonAssurance</span></div>
<div style="font-family: Consolas, Courier, monospace; font-size: 11pt; color: rgb(0, 0, 0);">
<span style="background-color: rgb(128, 255, 128);">DEBUG [net.shibboleth.idp.saml.attribute.transcoding.SAMLEncoderSupport:73] - Encoding value https://refeds.org/assurance/IAP/medium of attribute eduPersonAssurance</span></div>
<div style="font-family: Consolas, Courier, monospace; font-size: 11pt; color: rgb(0, 0, 0);">
<span style="background-color: rgb(255, 255, 0);">DEBUG [net.shibboleth.idp.saml.attribute.transcoding.SAMLEncoderSupport:73] - Encoding value https://refeds.org/assurance of attribute eduPersonAssurance</span></div>
<div style="font-family: Consolas, Courier, monospace; font-size: 11pt; color: rgb(0, 0, 0);">
<span style="background-color: rgb(255, 255, 0);">DEBUG [net.shibboleth.idp.saml.attribute.transcoding.SAMLEncoderSupport:73] - Encoding value https://refeds.org/assurance/ID/eppn-unique-reassign-1y of attribute eduPersonAssurance</span></div>
<div style="font-family: Consolas, Courier, monospace; font-size: 11pt; color: rgb(0, 0, 0);">
<span style="background-color: rgb(255, 255, 0);">DEBUG [net.shibboleth.idp.saml.attribute.transcoding.SAMLEncoderSupport:73] - Encoding value https://refeds.org/assurance/IAP/low of attribute eduPersonAssurance</span></div>
<div style="font-family: Consolas, Courier, monospace; font-size: 11pt; color: rgb(0, 0, 0);">
<span style="background-color: rgb(255, 255, 0);">DEBUG [net.shibboleth.idp.saml.attribute.transcoding.SAMLEncoderSupport:73] - Encoding value https://refeds.org/assurance/IAP/medium of attribute eduPersonAssurance</span></div>
<div style="font-family: Consolas, Courier, monospace; font-size: 11pt; color: rgb(0, 0, 0);">
DEBUG [net.shibboleth.idp.saml.saml2.profile.impl.AddAttributeStatementToAssertion:227] - Profile Action AddAttributeStatementToAssertion: Attempting to encode attribute eduPersonScopedAffiliation as a SAML 2 Attribute</div>
<div style="font-family: Consolas, Courier, monospace; font-size: 11pt; color: rgb(0, 0, 0);">
<span style="background-color: rgb(128, 255, 128);">DEBUG [net.shibboleth.idp.saml.attribute.transcoding.SAMLEncoderSupport:73] - Encoding value member@grinnell.edu of attribute eduPersonScopedAffiliation</span></div>
<div style="font-family: Consolas, Courier, monospace; font-size: 11pt; color: rgb(0, 0, 0);">
<span style="background-color: rgb(255, 255, 0);">DEBUG [net.shibboleth.idp.saml.attribute.transcoding.SAMLEncoderSupport:73] - Encoding value member@grinnell.edu of attribute eduPersonScopedAffiliation</span></div>
<div style="font-family: Consolas, Courier, monospace; font-size: 11pt; color: rgb(0, 0, 0);">
DEBUG [net.shibboleth.idp.saml.saml2.profile.impl.AddAttributeStatementToAssertion:227] - Profile Action AddAttributeStatementToAssertion: Attempting to encode attribute eduPersonAffiliation as a SAML 2 Attribute</div>
<div style="font-family: Consolas, Courier, monospace; font-size: 11pt; color: rgb(0, 0, 0);">
<span style="background-color: rgb(128, 255, 128);">DEBUG [net.shibboleth.idp.saml.attribute.transcoding.SAMLEncoderSupport:73] - Encoding value member of attribute eduPersonAffiliation</span></div>
<div class="elementToProof" style="font-family: Consolas, Courier, monospace; font-size: 11pt; color: rgb(0, 0, 0);">
<span style="background-color: rgb(255, 255, 0);">DEBUG [net.shibboleth.idp.saml.attribute.transcoding.SAMLEncoderSupport:73] - Encoding value member of attribute eduPersonAffiliation</span></div>
<div class="elementToProof" style="font-family: Arial, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
*** END LOGS ***</div>
<div class="elementToProof" style="font-family: Arial, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
<br>
</div>
<div class="elementToProof" style="font-family: Arial, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
*** RESULTING ASSERTION ***</div>
<div class="elementToProof" style="font-family: Consolas, Courier, monospace; font-size: 11pt; color: rgb(0, 0, 0);">
<saml2:AttributeStatement></div>
<div style="font-family: Consolas, Courier, monospace; font-size: 11pt; color: rgb(0, 0, 0);">
<saml2:Attribute FriendlyName="eduPersonAssurance"</div>
<div style="font-family: Consolas, Courier, monospace; font-size: 11pt; color: rgb(0, 0, 0);">
Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.11"</div>
<div style="font-family: Consolas, Courier, monospace; font-size: 11pt; color: rgb(0, 0, 0);">
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"</div>
<div style="font-family: Consolas, Courier, monospace; font-size: 11pt; color: rgb(0, 0, 0);">
></div>
<div style="font-family: Consolas, Courier, monospace; font-size: 11pt; color: rgb(0, 0, 0);">
<span style="background-color: rgb(128, 255, 128);"> <saml2:AttributeValue>https://refeds.org/assurance</saml2:AttributeValue></span></div>
<div style="font-family: Consolas, Courier, monospace; font-size: 11pt; color: rgb(0, 0, 0);">
<span style="background-color: rgb(128, 255, 128);"> <saml2:AttributeValue>https://refeds.org/assurance/ID/eppn-unique-reassign-1y</saml2:AttributeValue></span></div>
<div style="font-family: Consolas, Courier, monospace; font-size: 11pt; color: rgb(0, 0, 0);">
<span style="background-color: rgb(128, 255, 128);"> <saml2:AttributeValue>https://refeds.org/assurance/IAP/low</saml2:AttributeValue></span></div>
<div style="font-family: Consolas, Courier, monospace; font-size: 11pt; color: rgb(0, 0, 0);">
<span style="background-color: rgb(128, 255, 128);"> <saml2:AttributeValue>https://refeds.org/assurance/IAP/medium</saml2:AttributeValue></span></div>
<div style="font-family: Consolas, Courier, monospace; font-size: 11pt; color: rgb(0, 0, 0);">
<span style="background-color: rgb(255, 255, 0);"> <saml2:AttributeValue>https://refeds.org/assurance</saml2:AttributeValue></span></div>
<div style="font-family: Consolas, Courier, monospace; font-size: 11pt; color: rgb(0, 0, 0);">
<span style="background-color: rgb(255, 255, 0);"> <saml2:AttributeValue>https://refeds.org/assurance/ID/eppn-unique-reassign-1y</saml2:AttributeValue></span></div>
<div style="font-family: Consolas, Courier, monospace; font-size: 11pt; color: rgb(0, 0, 0);">
<span style="background-color: rgb(255, 255, 0);"> <saml2:AttributeValue>https://refeds.org/assurance/IAP/low</saml2:AttributeValue></span></div>
<div style="font-family: Consolas, Courier, monospace; font-size: 11pt; color: rgb(0, 0, 0);">
<span style="background-color: rgb(255, 255, 0);"> <saml2:AttributeValue>https://refeds.org/assurance/IAP/medium</saml2:AttributeValue></span></div>
<div style="font-family: Consolas, Courier, monospace; font-size: 11pt; color: rgb(0, 0, 0);">
</saml2:Attribute></div>
<div style="font-family: Consolas, Courier, monospace; font-size: 11pt; color: rgb(0, 0, 0);">
<saml2:Attribute FriendlyName="eduPersonScopedAffiliation"</div>
<div style="font-family: Consolas, Courier, monospace; font-size: 11pt; color: rgb(0, 0, 0);">
Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.9"</div>
<div style="font-family: Consolas, Courier, monospace; font-size: 11pt; color: rgb(0, 0, 0);">
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"</div>
<div style="font-family: Consolas, Courier, monospace; font-size: 11pt; color: rgb(0, 0, 0);">
></div>
<div style="font-family: Consolas, Courier, monospace; font-size: 11pt; color: rgb(0, 0, 0);">
<span style="background-color: rgb(128, 255, 128);"> <saml2:AttributeValue>member@grinnell.edu</saml2:AttributeValue></span></div>
<div style="font-family: Consolas, Courier, monospace; font-size: 11pt; color: rgb(0, 0, 0);">
<span style="background-color: rgb(255, 255, 128);"> <saml2:AttributeValue>member@grinnell.edu</saml2:AttributeValue></span></div>
<div style="font-family: Consolas, Courier, monospace; font-size: 11pt; color: rgb(0, 0, 0);">
</saml2:Attribute></div>
<div style="font-family: Consolas, Courier, monospace; font-size: 11pt; color: rgb(0, 0, 0);">
<saml2:Attribute FriendlyName="eduPersonAffiliation"</div>
<div style="font-family: Consolas, Courier, monospace; font-size: 11pt; color: rgb(0, 0, 0);">
Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.1"</div>
<div style="font-family: Consolas, Courier, monospace; font-size: 11pt; color: rgb(0, 0, 0);">
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"</div>
<div style="font-family: Consolas, Courier, monospace; font-size: 11pt; color: rgb(0, 0, 0);">
></div>
<div style="font-family: Consolas, Courier, monospace; font-size: 11pt; color: rgb(0, 0, 0);">
<span style="background-color: rgb(128, 255, 128);"> <saml2:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"</span></div>
<div style="font-family: Consolas, Courier, monospace; font-size: 11pt; color: rgb(0, 0, 0);">
<span style="background-color: rgb(128, 255, 128);"> xsi:type="xsd:string"</span></div>
<div style="font-family: Consolas, Courier, monospace; font-size: 11pt; color: rgb(0, 0, 0);">
<span style="background-color: rgb(128, 255, 128);"> >member</saml2:AttributeValue></span></div>
<div style="font-family: Consolas, Courier, monospace; font-size: 11pt; color: rgb(0, 0, 0);">
<span style="background-color: rgb(255, 255, 128);"> <saml2:AttributeValue>member</saml2:AttributeValue></span></div>
<div class="elementToProof" style="font-family: Arial, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
<span style="font-family: Consolas, Courier, monospace;"> </saml2:Attribute></span><br>
*** END ASSERTION ***</div>
<br>
<p style="font-family:Calibri;font-size:10pt;color:#000000;margin:5pt;font-style:normal;font-weight:normal;text-decoration:none;" align="Center">
Internal<br>
</p>
</body>
</html>