WSO2 身份服务器 5.1.0 未在 SAML 响应中返回用户声明 [英] WSO2 Identity Server 5.1.0 not returning user claims in SAML Response

问题描述

在尝试新版本的 WSO2 Identity Server 5.1.0 时，我在 SAML 响应中返回声明时遇到问题.虽然这在 WSO2 IS 5.0.0 SP1 中有效.我已经映射了所需的声明并将它们添加到我的 SP，我还配置了 SP 以始终返回用户属性.

While trying out the new version of WSO2 Identity Server 5.1.0 I'm having problems returning claims in the SAML response. While this worked in WSO2 IS 5.0.0 SP1. I've mapped the required claims and added them to my SP, also I configured the SP to always return the user attributes.

我已经配置了 SP 声明映射:

I've configured the SP claim mapping:

我的 SAML 配置:

My SAML configuration:

非常感谢任何帮助.我感觉这可能是一个错误.

Any help is greatly appreciated. I'm getting the feeling this might be a bug.

在 WSO2 5.1.0 中，需要将属性消费服务索引添加到 SAML 请求中.在 WSO2 5.0.0 SP1 中，即使没有在 SAML 请求中设置此值，它也能工作.

In WSO2 5.1.0 it is required to add the Attribute Consuming Service Index to the SAML Request. In WSO2 5.0.0 SP1 it worked even without setting this value in the SAML Request.

推荐答案

如果我猜对了，您可以从 IS 进行身份验证而不会出现任何错误，但没有收到 SAML 响应的声明.

If I got you correctly, You can authenticate from IS without any errors, but didn't get claims on SAML response.

我已经用 Travelocity 样本试过了.它按预期工作.我在 SAML 响应中收到了用户声明.根据您附上的屏幕截图，您已正确完成配置.请检查 &验证您在这些映射声明上是否具有值.如果用户的配置文件中没有值，则声明将不会出现在 SAML 响应中.您可以使用 SSO Tracer 或 SAML Tracer 进行检查.

I have tried this with Travelocity sample. It is working as expected. I got the user claims in the SAML response. According to the screen shots that you have attached, you have done the configurations correctly. Please check & verify that you have values on these mapped claims. If there is no values in user's profile, claims will not be in SAML response. You can check this with SSO Tracer or SAML Tracer.

这篇关于WSO2 身份服务器 5.1.0 未在 SAML 响应中返回用户声明的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！