<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Courier;
panose-1:2 7 4 9 2 2 5 2 4 4;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"Segoe UI";
panose-1:2 11 5 2 4 2 4 2 2 3;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
span.EmailStyle18
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal">I’ve followed <a href="https://shibboleth.atlassian.net/wiki/spaces/KB/pages/2783936889/SAML+Proxying+EntraID+Azure+with+the+Shibboleth+IdP">
SAML Proxying EntraID / Azure with the Shibboleth IdP - Shibboleth Knowledge Base - Confluence</a> which is for IdP v5 and up, but previously I was using the guidance from
<a href="https://shibboleth.atlassian.net/wiki/spaces/KB/pages/1467056889/Using+SAML+Proxying+in+the+V4+Shibboleth+IdP+to+connect+with+Azure+AD">
Using SAML Proxying in the V4 Shibboleth IdP to connect with Azure AD - Shibboleth Knowledge Base - Confluence</a> and was having difficulties getting the Entra claims to be transposed to Shibboleth attributes. The v4 documentation details the “joining” and
the <span style="font-size:10.5pt;font-family:Courier;color:#172B4D;background:white">
canonicalNameToUseForJoin in the attribute-resolver.xml and </span><span style="font-size:10.5pt;font-family:"Segoe UI",sans-serif;color:#172B4D;background:white">in c14n/attribute-sourced-subject-c14n-config.xml, but the v5 guidance doesn’t touch on a canonicalNameToUserForJoin.
Is this handled elsewhere in v5 or was it missed in the guidance?</span><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I see the claims from Entra, but <o:p></o:p></p>
<p class="MsoNormal"> <Attribute Name="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress"><o:p></o:p></p>
<p class="MsoNormal"> <AttributeValue>e*****@g*****.edu</AttributeValue><o:p></o:p></p>
<p class="MsoNormal"> </Attribute><o:p></o:p></p>
<p class="MsoNormal"> <Attribute Name="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name"><o:p></o:p></p>
<p class="MsoNormal"> <AttributeValue>e*****@g*****.edu</AttributeValue><o:p></o:p></p>
<p class="MsoNormal"> </Attribute><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">but I get <o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">INFO [net.shibboleth.idp.saml.saml2.profile.impl.ValidateSAMLAuthentication:539] - Profile Action ValidateSAMLAuthentication: No transcoding rule for Attribute (Name http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress', NameFormat:
'urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified')<o:p></o:p></p>
<p class="MsoNormal">INFO [net.shibboleth.idp.saml.saml2.profile.impl.ValidateSAMLAuthentication:539] - Profile Action ValidateSAMLAuthentication: No transcoding rule for Attribute (Name 'http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name', NameFormat:
'urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified')<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Do I need to merge the v4 and v5 guidance?<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Thank you for your help in advance.<o:p></o:p></p>
<p class="MsoNormal">==================================<o:p></o:p></p>
<p class="MsoNormal">Eric Yurick<o:p></o:p></p>
<p class="MsoNormal">Internet Specialist<o:p></o:p></p>
<p class="MsoNormal">Gettysburg College<o:p></o:p></p>
<p class="MsoNormal"><a href="mailto:eyurick@gettysburg.edu"><span style="color:#0563C1">eyurick@gettysburg.edu</span></a><o:p></o:p></p>
<p class="MsoNormal">717-337-6888<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>