smartsheet integration

[Nate Klingenstein]

WS-* attributes are a legacy that ADFS continues to spread.  They're basically identical to the existing SAML/LDAP attributes but with a unique lovely name.

http://technet.microsoft.com/en-us/library/ee913589.aspx

You'll need a custom attribute with a custom encoder for this SP, such as:

    <resolver:AttributeDefinition xsi:type="ad:Simple" id="emailForWSStar" sourceAttributeID="mail">
        <resolver:Dependency ref="myLDAP" />
        <resolver:AttributeEncoder xsi:type="enc:SAML2String" name="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress" friendlyName="mail" />
    </resolver:AttributeDefinition>

and so forth.

Then release those custom attributes to the SP in question.

On Feb 27, 2014, at 6:20 PM, "Paul B. Henson" <henson at csupomona.edu>
 wrote:

> I've been asked to set up our shibboleth idp to work with smartsheet.com (some kind of online hosted project management service). Anybody here done that before?
> 
> Reviewing their documentation:
> 
> http://help.smartsheet.com/customer/portal/articles/516133-using-single-sign-on-saml
> 
> It doesn't seem overly complicated; they don't belong to any federation and as such require ad hoc metadata maintenance :(, but they do explicitly list the shibboleth IDP as compatible with their SAML implementation (for whatever that's worth ;) ).
> 
> It says they want four attributes asserted:
> 
> urn:oasis:names:tc:SAML:2.0:nameid‐format:persistent
> http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress
> http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname
> http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname
> 
> The first one is of course quite familiar, but I'm not sure what to make of the other three; we do of course have attributes corresponding to that data, but I'm not quite clear on how to map them into the assertion in the format they are looking for?
> 
> Thanks…
> 
> 
> --
> Paul B. Henson  |  (909) 979-6361  |  http://www.csupomona.edu/~henson/
> Operating Systems and Network Analyst  |  henson at csupomona.edu
> California State Polytechnic University  |  Pomona CA 91768
> 
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net