On 15 Sep 2009, at 10:59, NS Hashmi, Information Systems and Computing
wrote:
> Our IdP access logs show: -
> .... Attribute assertion (_....) issued to anonymous provider at
> (...) on behalf of principal etc ..
This means that your IdP can't tell which SP is making the request for
attributes. That generally means that they won't get anything
interesting.
If you're seeing this from only one SP, it's probably a configuration
error at their end. If you're seeing it from multiple SPs, and
particularly if you're seeing it from major services like Digimap,
it's probably a configuration error at your end.
Is your IdP built using just Shib in Tomcat, or is Apache also in
there front-ending it? I think the places things can go wrong would
differ in these two cases.
-- Ian
|