smartsheet integration

[Paul B. Henson]

I've been asked to set up our shibboleth idp to work with smartsheet.com (some kind of online hosted project management service). Anybody here done that before?

Reviewing their documentation:

http://help.smartsheet.com/customer/portal/articles/516133-using-single-sign-on-saml

It doesn't seem overly complicated; they don't belong to any federation and as such require ad hoc metadata maintenance :(, but they do explicitly list the shibboleth IDP as compatible with their SAML implementation (for whatever that's worth ;) ).

It says they want four attributes asserted:

urn:oasis:names:tc:SAML:2.0:nameid‐format:persistent
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname

The first one is of course quite familiar, but I'm not sure what to make of the other three; we do of course have attributes corresponding to that data, but I'm not quite clear on how to map them into the assertion in the format they are looking for?

Thanks…


--
Paul B. Henson  |  (909) 979-6361  |  http://www.csupomona.edu/~henson/
Operating Systems and Network Analyst  |  henson at csupomona.edu
California State Polytechnic University  |  Pomona CA 91768