Salesforce with Shibboleth IdP

[Curry, Warren]

Andrew,  

I guess this response from Mike Chale at UF - College of Business was bounced back to him I am forwarding on to the list..  We had issue due to required encryption at UF.  
Warren 
==================================.

Good afternoon, Andrew


We tried to use Shibboleth as an IdP but ran into a few stumbling blocks, one of which was a show-stopper - Salesforce cannot handle encrypted responses from the IdP and our university's current policy is to only provide encrypted responses.

If you would like to discuss any further details I would be happy to help you out.


  Michael Chale
  Solutions Engineer
  Technology Solutions

-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Andrew Morgan
Sent: Monday, June 11, 2012 12:52 PM
To: Shib Users
Subject: Re: Salesforce with Shibboleth IdP

On Fri, 8 Jun 2012, Peter Schober wrote:

> * Andrew Morgan <morgan at orst.edu> [2012-06-07 18:42]:
>>    Login Error
>>    Your login attempt using single sign-on with an identity provider
>>    certificate has failed. Please contact your salesforce.com administrator
>>    for more information.
>
> If all else fails you could try just that?
> -peter

Unfortunately, my co-worker is the administrator and we are both trying to understand what is going wrong!  :)

We have tried using Salesforce's SAML assertion validator, but that doesn't raise any errors.  I was hoping someone might have experience with Salesforce, or at least have a working Shibboleth-Salesforce setup that I could compare against.

Thanks,
 	Andy
--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net