Google Apps using Shibboleth

[Prasanna]

Dear Christopher,

Thanks for your reply. Please find the text version of my config files.

*Attribute filter:*

<afp:AttributeFilterPolicy id="google.com"> 
         <afp:PolicyRequirementRule
xsi:type="basic:AttributeRequesterString" value="google.com" /> 
         <afp:AttributeRule attributeID="principal"> 
             <afp:PermitValueRule xsi:type="basic:ANY" /> 
         </afp:AttributeRule> 
</afp:AttributeFilterPolicy> 

      

<afp:AttributeFilterPolicy id="releaseTransientIdToAnyone"> 
         <afp:PolicyRequirementRule xsi:type="basic:NOT"> 
                 <basic:Rule xsi:type="basic:AttributeRequesterString"
value="google.com/a/imperoidm.com" /> 
         </afp:PolicyRequirementRule> 
         <afp:AttributeRule attributeID="transientId"> 
             <afp:PermitValueRule xsi:type="basic:ANY" /> 
         </afp:AttributeRule> 
</afp:AttributeFilterPolicy>

*Attribute resolver*

    
    
    

    
<resolver:AttributeDefinition id="principal" xsi:type="PrincipalName"
	xmlns="urn:mace:shibboleth:2.0:resolver:ad">
	<resolver:AttributeEncoder xsi:type="SAML2StringNameID"
xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
		nameFormat="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified" />
</resolver:AttributeDefinition>

*Relying party*

<rp:RelyingParty id="google.com"
provider="https://dc01.imperoidm.com/idp/shibboleth"
defaultSigningCredentialRef="IdPCredential">
	<rp:ProfileConfiguration xsi:type="saml:SAML2SSOProfile"
encryptAssertions="never" encryptNameIds="never" />
</rp:RelyingParty>
        
    
    
    
    
    
    <metadata:MetadataProvider id="ShibbolethMetadata"
xsi:type="metadata:ChainingMetadataProvider">
    
    	
        <metadata:MetadataProvider id="IdPMD"
xsi:type="metadata:ResourceBackedMetadataProvider">
            <metadata:MetadataResource
xsi:type="resource:FilesystemResource" file="C:\Program Files
(x86)\Internet2\Shib2Idp/metadata/imperoidm-metadata.xml"/>
        </metadata:MetadataProvider>
        
        

        <metadata:MetadataProvider id="TestShib"
xsi:type="metadata:FileBackedHTTPMetadataProvider" 
                         
metadataURL="http://www.testshib.org/metadata/testshib-providers.xml"
                          backingFile="C:\Program Files
(x86)\Internet2\Shib2Idp/metadata/testshib.xml" 
                          />
	
	<metadata:MetadataProvider id="GoogleMD"
xsi:type="FilesystemMetadataProvider"
xmlns="urn:mace:shibboleth:2.0:metadata" 
		metadataFile="C:\Program Files
(x86)\Internet2\Shib2IdP/metadata/google-metadata.xml"
requireValidMetadata="false"  />
        
    </metadata:MetadataProvider>

*Google metedata*
<EntityDescriptor entityID="google.com"
xmlns="urn:oasis:names:tc:SAML:2.0:metadata">
	<SPSSODescriptor
protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
	
<NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameidformat:unspecified</NameIDFormat>
		<AssertionConsumerService index="1"
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
		Location="https://www.google.com/a/imperoidm.com/acs" />
	</SPSSODescriptor>
</EntityDescriptor>




I hope this would help you to find my mistake.

Thanks
Prasanna




-----
Prasanna V B
--
View this message in context: http://shibboleth.1660669.n2.nabble.com/Google-Apps-using-Shibboleth-tp7583436p7583459.html
Sent from the Shibboleth - Users mailing list archive at Nabble.com.