Google Apps using Shibboleth

[Christopher Bongaarts]

On 12/3/2012 3:58 AM, Prasanna wrote:
> Hello everyone,
>
> I have tested Google Apps using Shibboleth few months before and it worked
> fine. But recently I tried to provide SSO to Google Apps using Shibboleth
> for a different account. I assume that I have done all the configuration
> correctly. But still I get an error after I login into IDP page. I have
> placed few screenshots for all of your reference. Kindly help me as I have
> got to show demo to our clients coming friday.

This would be easier to point out if you had just cut/pasted the config 
lines into the email rather than taking pictures of them...

You need to use the same AttributeRequesterString in your two 
AttributeFilterPolicies so that you consistently release only the 
principal as the NameID instead of transient.  Both values should be the 
full entityID from google.

-- 
%%  Christopher A. Bongaarts   %%  cab at umn.edu          %%
%%  OIT - Identity Management  %%  http://umn.edu/~cab  %%
%%  University of Minnesota    %%  +1 (612) 625-1809    %%