smartsheet integration

[Nate Klingenstein]

Oh, and by the way, the alternative to this is to politely ask the vendor to support normal SAML 2.0 attribute names.

On Feb 27, 2014, at 6:47 PM, Nate Klingenstein <ndk at internet2.edu> wrote:

> WS-* attributes are a legacy that ADFS continues to spread.  They're basically identical to the existing SAML/LDAP attributes but with a unique lovely name.
> 
> http://technet.microsoft.com/en-us/library/ee913589.aspx
> 
> You'll need a custom attribute with a custom encoder for this SP, such as:
> 
>    <resolver:AttributeDefinition xsi:type="ad:Simple" id="emailForWSStar" sourceAttributeID="mail">
>        <resolver:Dependency ref="myLDAP" />
>        <resolver:AttributeEncoder xsi:type="enc:SAML2String" name="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress" friendlyName="mail" />
>    </resolver:AttributeDefinition>
> 
> and so forth.
> 
> Then release those custom attributes to the SP in question.
> 
> On Feb 27, 2014, at 6:20 PM, "Paul B. Henson" <henson at csupomona.edu>
> wrote:
> 
>> I've been asked to set up our shibboleth idp to work with smartsheet.com (some kind of online hosted project management service). Anybody here done that before?
>> 
>> Reviewing their documentation:
>> 
>> http://help.smartsheet.com/customer/portal/articles/516133-using-single-sign-on-saml
>> 
>> It doesn't seem overly complicated; they don't belong to any federation and as such require ad hoc metadata maintenance :(, but they do explicitly list the shibboleth IDP as compatible with their SAML implementation (for whatever that's worth ;) ).
>> 
>> It says they want four attributes asserted:
>> 
>> urn:oasis:names:tc:SAML:2.0:nameid‐format:persistent
>> http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress
>> http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname
>> http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname
>> 
>> The first one is of course quite familiar, but I'm not sure what to make of the other three; we do of course have attributes corresponding to that data, but I'm not quite clear on how to map them into the assertion in the format they are looking for?
>> 
>> Thanks…
>> 
>> 
>> --
>> Paul B. Henson  |  (909) 979-6361  |  http://www.csupomona.edu/~henson/
>> Operating Systems and Network Analyst  |  henson at csupomona.edu
>> California State Polytechnic University  |  Pomona CA 91768
>> 
>> --
>> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
> 
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net