How to make Shibboleth IdP send an attribute in emailAddress format? -


i trying configure shibboleth identity provider work existing saml 2.0 service provider (i assume it's shibboleth), fails invalidnameidpolicy status , following error message.

required nameid format not supported 

the authnrequest message has following restriction.

<samlp:nameidpolicy      allowcreate="true"      format="urn:oasis:names:tc:saml:1.1:nameid-format:emailaddress"/> 

how create attribute of desired type? how change following attribute definition in attribute-resolver.xml have right format?

<resolver:attributedefinition xsi:type="ad:simple" id="email"                                sourceattributeid="email">     <resolver:dependency ref="myref" />     <resolver:attributeencoder xsi:type="enc:saml1string"                                 name="urn:mace:dir:attribute-def:mail"/>      <resolver:attributeencoder           xsi:type="enc:saml2string"           name="urn:oid:0.9.2342.19200300.100.1.3" friendlyname="mail"/>  </resolver:attributedefinition> 

thanks.

the answer add following attributeencoder @ beginning of list.

<resolver:attributeencoder       xsi:type="enc:saml2stringnameid"      nameformat="urn:oasis:names:tc:saml:1.1:nameid-format:emailaddress" /> 

Comments

Popular posts from this blog

python - How to create a legend for 3D bar in matplotlib? -

java - Multi-Label Document Classification -

php - Dynamic url re-writing using htaccess -