Shibboleth & Oracle CRM On Demand

[Cantor, Scott]

On 12/12/11 10:55 PM, "Kidd, Don W." <kidddw at muohio.edu> wrote:
>
>The first challenge is that they don't really have a meta data file, so I
>am having to create one.  Have others had to piece things together to
>make a metadata file?  What challenges did you face in creating the
>metadata file?  

You often have to do this.

>I have a value to fill in called the ITS URL.  Here is what the
>documentation says they mean by ITS URL.
>
>* The URL of the customer¹s ITS (Intersite Transfer Service).
>
>* This is optional but should be configured in the CRMOD company profile
>to support the Destination Site First scenario and non-browser clients.
>
>* i.e. this is the URL that the user will be redirected to if they try to
>access CRMOD without an authenticated session.

That's a SAML 1.1 term, and there is no such thing in an interoperable
sense. Without knowing what protocol they actually use to talk to the ITS,
you can't really set it up. Shibboleth defined its own request flow, and
that won't match what they do. You will probably have to script something
in between.

>I was wondering which value to put in here.  Anyone have ideas?  My last
>attempt was to use /profile/Shibboleth/SSO.  But I see an warning
>"No providerId parameter given in Shibboleth SSO authentication request."
> 

See above. Good guess, but that's why it won't work.

>Suggestions on this would be helpful..

They have to document what they're sending or you'll have to rev. engineer
it.

-- Scott