4:59 p.m.
Hi again,
Just to add some more information. I’m receiving a (seemingly) valid SAML response in
Satosa (I see the base64 encoded token in the logs), but nothing is being picked up out of
it.
If I request a signature (and one is in the response) I get the error, “Signature missing
for response”. Likewise, it looks like none of the attributes are recognised.
I don’t think I’m doing anything non-standard. It’s a simple SAML-SAML set up (1 SP, 1
IdP), no microservices, running with Docker. I have made very few changes from the example
provided at https://github.com/IdentityPython/SATOSA/tree/master/example
Any input appreciated,
Hannah
On 30 Oct 2018, at 14:31, Hannah Short <hannah.short at cern.ch<mailto:hannah.short
at cern.ch>> wrote:
Hello,
I’m hitting a strange problem; when a successful SAML response is received by the Satosa
backend containing a pretty complete attribute statement (see below), the attributes not
recognised by the Backend and I see the error “backend received attributes: {}”.
I’m currently just testing things and haven’t changed the internal_attributes.yaml from
the example. My IdP is currently just the SimpleSAMLphp userpass example with some mocked
up SAML attributes. I wondered whether the attribute Name Format is incorrect, but I don’t
see where this can be configured within Satosa.
Has anyone else hit this problem?
Thanks in advance,
Hannah
====================
<saml:AttributeStatement>
<saml:Attribute Name="uid"
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
<saml:AttributeValue
xsi:type="xs:string">student</saml:AttributeValue>
</saml:Attribute>
<saml:Attribute Name="eduPersonAffiliation"
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
<saml:AttributeValue
xsi:type="xs:string">member</saml:AttributeValue>
<saml:AttributeValue
xsi:type="xs:string">student</saml:AttributeValue>
</saml:Attribute>
<saml:Attribute Name="eduPersonTargetedID"
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
<saml:AttributeValue
xsi:type="xs:string">123456789</saml:AttributeValue>
</saml:Attribute>
<saml:Attribute Name="givenName"
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
<saml:AttributeValue
xsi:type="xs:string">Test</saml:AttributeValue>
</saml:Attribute>
<saml:Attribute Name="displayName"
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
<saml:AttributeValue xsi:type="xs:string">Test
Person</saml:AttributeValue>
</saml:Attribute>
<saml:Attribute Name="email"
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
<saml:AttributeValue xsi:type="xs:string">test at
cern.ch<mailto:test at cern.ch></saml:AttributeValue>
</saml:Attribute>
</saml:AttributeStatement>