Shibboleth IdP v3 beta 1 Salesforce.com Integration

[Cantor, Scott]

On 12/6/14, 12:13 AM, "Mark Boyce" <Mark.Boyce at ucop.edu> wrote:

>We were successful using an attribute, but only without encryption.  
>Adding encryption forced us to revert to using a nameID / Subject rather 
>than attribute.  Salesforce supposedly supports both.  Seems the choice 
>is attribute without encryption or encryption and send nameID/Subject.

That may have been the bug we hit. I didn't ever think to try that, 
because, uh, that makes no sense. ;-)

I also abandoned encryption with them because I had the strong impression 
they botched it and we're doing to basically roll their decryption key 
every year, since they used a certificate with an expiration in it. Not 
worth the hassle IMHO.

-- Scott