Jon Warbrick wrote:
> Secondly, if anyone has access to a UK Federation-only IdP that is
> expected to release at least some attributes (perhaps ePSA and/or ePTID)
> to LSE then could you try accessing
>
> https://gabriel.lse.ac.uk/simon/cgi-bin/printenv.pl
>
> and let me know if those attributes appear in the resulting table (the
> table will appear whatever, the question is whether the attribute values
> are there or not). Just tell me - I'll summarise replies and any
> eventual outcome to the list.
I get different results from my two separate test IdPs. The 1.2 test
IdP (urn:mace:ac.uk:sdss.ac.uk:provider:identity:iay.org.uk) works, but
with the 1.3 IdP
(urn:mace:ac.uk:sdss.ac.uk:provider:identity:idp.iay.org.uk) I see the
authentication response go out but no attribute query coming in and the
result page doesn't have my attributes. There's a delay there that
looks like a timeout; assuming that's not a firewall at LSE, it is
possible that the SP has the wrong metadata for that IdP (it changed a
couple of weeks back). If Simon can look for that transaction in the
logs, it would be interesting to see where it thinks my AA is.
My last failed request was at 15:56:50 or so.
-- Ian
|