Google Apps integration

[Daniel A. Ramaley]

I have a quick question about getting the Shibboleth IdP working with 
Google Apps. I'm a Shibboleth newbie, but have successfully gotten the 
IdP to work with TestShib Two, so i know the basic configuration is 
correct.

According to Google' documentation[1], i need to configure Shibboleth to 
release the "principal attribute (encoded as a NameID)" to Google Apps. 
Any idea what the principal attribute is? Is that the person's e-mail 
address (that's what Google uses to identify people)? (And if so, is it 
a full address like "daniel.ramaley at drake.edu" or just the name part 
like "daniel.ramaley"?) Or is it something else? And what is NameID 
encoding?

I asked these questions of Google support, but they told me it is not 
supported and suggested i ask this list. If anyone else has successfully 
configured Google Apps to work with their IdP, please let me know!

Thanks in advance,
Dan


[1] https://code.google.com/apis/apps/articles/shibboleth2.0.html

__
Daniel A. Ramaley
Network Engineer 2

Dial Center 112, Drake University
2407 Carpenter Ave / Des Moines IA 50311 USA
Tel: +1 515 271-4540
Fax: +1 515 271-1938
E-mail: daniel.ramaley at drake.edu