Google Apps integration

Chad La Joie lajoie at shibboleth.net
Wed Dec 14 15:19:22 GMT 2011


They told you their product wasn't supported?  Sounds like a great model
for them.

In answer to your question, you can send either the mailbox name or the
full email address.  If you have multiple domains you need to send the
full address so that they can map to the appropriate domain.

On 12/14/11 10:12 AM, Daniel A. Ramaley wrote:
> I have a quick question about getting the Shibboleth IdP working with 
> Google Apps. I'm a Shibboleth newbie, but have successfully gotten the 
> IdP to work with TestShib Two, so i know the basic configuration is 
> correct.
> 
> According to Google' documentation[1], i need to configure Shibboleth to 
> release the "principal attribute (encoded as a NameID)" to Google Apps. 
> Any idea what the principal attribute is? Is that the person's e-mail 
> address (that's what Google uses to identify people)? (And if so, is it 
> a full address like "daniel.ramaley at drake.edu" or just the name part 
> like "daniel.ramaley"?) Or is it something else? And what is NameID 
> encoding?
> 
> I asked these questions of Google support, but they told me it is not 
> supported and suggested i ask this list. If anyone else has successfully 
> configured Google Apps to work with their IdP, please let me know!
> 
> Thanks in advance,
> Dan
> 
> 
> [1] https://code.google.com/apis/apps/articles/shibboleth2.0.html
> 
> __
> Daniel A. Ramaley
> Network Engineer 2
> 
> Dial Center 112, Drake University
> 2407 Carpenter Ave / Des Moines IA 50311 USA
> Tel: +1 515 271-4540
> Fax: +1 515 271-1938
> E-mail: daniel.ramaley at drake.edu
> 
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net


More information about the users mailing list