How to make Shibboleth IdP send an attribute in emailAddress format? -
i trying configure shibboleth identity provider work existing saml 2.0 service provider (i assume it's shibboleth), fails invalidnameidpolicy status , following error message.
required nameid format not supported the authnrequest message has following restriction.
<samlp:nameidpolicy allowcreate="true" format="urn:oasis:names:tc:saml:1.1:nameid-format:emailaddress"/> how create attribute of desired type? how change following attribute definition in attribute-resolver.xml have right format?
<resolver:attributedefinition xsi:type="ad:simple" id="email" sourceattributeid="email"> <resolver:dependency ref="myref" /> <resolver:attributeencoder xsi:type="enc:saml1string" name="urn:mace:dir:attribute-def:mail"/> <resolver:attributeencoder xsi:type="enc:saml2string" name="urn:oid:0.9.2342.19200300.100.1.3" friendlyname="mail"/> </resolver:attributedefinition> thanks.
the answer add following attributeencoder @ beginning of list.
<resolver:attributeencoder xsi:type="enc:saml2stringnameid" nameformat="urn:oasis:names:tc:saml:1.1:nameid-format:emailaddress" />
Comments
Post a Comment