ADP integration

[Etan Weintraub]

We did it at Hopkins for Paystubs a few years ago, and have finally started to move away from them. They are incredibly difficult to work with (as Michael described), and have zero fault tolerance if things don't match up exactly the way they expect it (i.e. if you send one single attribute in the assertion that they aren't expecting, it breaks completely, rather than just ignoring it like other SP's do). Like Michael said, I wouldn't recommend working with them if you have another option. We are in the process of moving everyone over to our SAP implementation that now has an Employee Self Service module that shows them their paystubs.

-Etan E. Weintraub
Sr. Systems Engineer
Directory Architecture
IT at Johns Hopkins
Johns Hopkins at Mt. Washington
5801 Smith Ave.
Suite 3110B
Baltimore, MD 21209
Phone: 410-735-7945
E-mail: eweintra at jhmi.edu


-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Michael R. Gettes
Sent: Monday, November 12, 2012 9:04 AM
To: Shib Users
Subject: Re: ADP integration

We tried to use ADP.  They want $5K for initial setup.  You pay by the user each month for federated access.  They refused to join InCommon.  Their legal agreement took significant work on the part of CMU to help them understand liability as they wanted to use federated access as a reason to push ALL liability for their service onto us - yes, this is true.  We believe we got them to understand where liability sits in a federated world but we are unsure if they learned this lesson just for CMU or more broadly.  In the end, after 1 year of trying to make it work with them we decided to skip the continued level of effort given our impending move to WorkDay.  IMHO, for an org as small as UCAID, I wouldn't recommend the cost (money as well as effort).

/mrg

On Nov 11, 2012, at 16:16, Steven Carmody <steven_carmody at brown.edu> wrote:

> We used ADP for the tail end of payroll processing. We used a SAML login to view pay stubs and W2's.
> 
> Sent from my iPad
> 
> On Nov 11, 2012, at 12:49 PM, Tom Scavo <trscavo at gmail.com> wrote:
> 
>> Hi,
>> 
>> Has anyone integrated their IdP with ADP.com? We have ADP time reporting at work but the login interface is not SAML-enabled. I heard that ADP has a SAML-enabled login interface. Is that true? (there is nothing on the ADP web site to indicate this is true, however)
>> 
>> Thanks,
>> Tom
>> --
>> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net

--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net