satosa-users July 2026

satosa-users@lists.sunet.se

3 participants
3 discussions

Unknown attribute name when visible in Attribute Statement

by taylorhucker＠gmail.com

I am writing to request assistance with releasing a custom attribute that is not listed as a requested attribute by one of our InCommon Service Providers (SPs). The attribute is present in the IDP response, but it appears that it is not being returned to the InCommon SP. I have attempted to set the attribute as default for all SPs, but I would like to limit its release to specific SP if needed. I have made some changes to the configuration files and observed the following log messages: Filter: ['edupersonprincipalname', 'edupersonaffiliation', 'givenname', 'edupersonscopedaffiliation', 'mail', 'edupersontargetedid'] Attribute Statement: <ns0:AttributeStatement xmlns:ns0="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"><ns0:Attribute FriendlyName="mail" Name="urn:oid:0.9.2342.19200300.100.1.3" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"> <ns0:Attribute FriendlyName="abcID" Name="urn:oid:1.3.6.1.4.18941.1.2.1.1" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><ns0:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema" xsi:type="xs:string">8989898</ns0:AttributeValue></ns0:Attribute> <ns0:NameID Format="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent">99999</ns0:NameID></ns0:AttributeValue></ns0:Attribute></ns0:AttributeStatement> Unknown attribute name: <ns0:Attribute xmlns:ns0="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" FriendlyName="abcID" Name="urn:oid:1.3.6.1.4.18941.1.2.1.1" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><ns0:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema" xsi:type="xs:string">8989898</ns0:AttributeValue></ns0:Attribute> skipped backend attribute ['abcID']: no value found I have made the following changes to the configuration files: Internal_attributes.yaml Added abcid: saml: [abcID] Backend.yaml Added custom_attribute_release: "default": include: ["abcID"] allow_unknown_attributes: true attribute_map_dir: [/etc/satosa/attributemaps] Frontend.yaml -No specific changes made Saml_url.py From area: 'urn:oid:1.3.6.1.4.18941.1.2.1.1': 'abcID', To area: 'abcID': 'urn:oid:1.3.6.1.4.18941.1.2.1.1', Could you please help me troubleshoot this issue and provide guidance on how to release the custom attribute as needed? Also how could I release this attribute as the NameID for just the specific SP that requires it?

2 weeks, 2 days

FW: SATOSA Single Logout Service

by ferdy.mul＠ncr.nstda.or.th

Resend. From: Ferdy Mulyadi <ferdy.mul at ncr.nstda.or.th> Sent: Selasa, 04 Februari 2020 10.15 To: 'satosa-users at lists.sunet.se' <satosa-users at lists.sunet.se> Subject: SATOSA Single Logout Service Hi SATOSA users, Currently, we are working on SSO project which is Zoom SSO service. We use SATOSA proxy in order to connect with our identity federation (one-to-many type), and we have already implemented single sign-on (SSO) service and it's working, however we still require single logout service (SLO). We couldn't find any SATOSA configuration regarding to SLO from SATOSA documentation. Without SLO, although user has already selected and clicked log out from Zoom, the session still there, otherwise user requires to clear the browser cache. Could you explain to us, how to implement SLO in SATOSA? Thank you. ---------------- Best regards, Mr. Ferdy Mulyadi Research Assistant Internet Innovation Research Team (INO - CNWRG) National Electronics and Computer Technology Center (NECTEC) National Science and Technology Department Agency (NSTDA) Thailand Science Park (TSP) - 112 Phaholyothin Rd., Khlong Nueng, Khlong Luang Pathum Thani, THAILAND ________________________________ Disclaimer: This e-mail and any files transmitted with it may contain confidential and proprietary information of the National Science and Technology Development Agency (NSTDA), Thailand. They are intended solely for the use of the addressed individuals or entities. If you are not the intended recipient, you are required to immediately delete this e-mail and its contents from your system. Any disclosure, distribution, or action based upon the contents of this e-mail is strictly prohibited. Any views or opinions presented in this e-mail are solely those of the sender and do not necessarily represent those of NSTDA. NSTDA does not accept any responsibility for the content of this message or the consequences of any actions taken on the basis of the information provided. NSTDA accepts no liability for any damage caused by any virus or malware which may be inserted in this e-mail during transmission.

3 weeks, 2 days

configuration error: unknown system entity

by Jonas Schwab

Dear all, I am currently trying to set up a saml2-saml2 proxy and have come to an impasse: It seems that I have incorrectly/incompletely set up the frontend. When trying to log in satosa logs "configuration error: unknown system entity <entityID of SP>". I thought the entityID would be set in the frontend plugin configuration through config.idp_config.metadata.local = <file containing SP metadata>. Do I have to set the SP entityID somewhere else? Thank you for your help! Best regards, Jonas Schwab

1 month

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

satosa-users July 2026