smartsheet integration

[Mark K. Miller]

And, while you're at it, tell them you're an InCommon member and they 
should be too.  Sponsor their membership and get them headed in the right 
direction!

Max

On Fri, 28 Feb 2014, Nate Klingenstein wrote:

> Oh, and by the way, the alternative to this is to politely ask the 
> vendor to support normal SAML 2.0 attribute names.
>
> On Feb 27, 2014, at 6:47 PM, Nate Klingenstein <ndk at internet2.edu> wrote:
>
>> WS-* attributes are a legacy that ADFS continues to spread.  They're basically identical to the existing SAML/LDAP attributes but with a unique lovely name.
>>
>> http://technet.microsoft.com/en-us/library/ee913589.aspx
>>
>> You'll need a custom attribute with a custom encoder for this SP, such as:
>>
>>    <resolver:AttributeDefinition xsi:type="ad:Simple" id="emailForWSStar" sourceAttributeID="mail">
>>        <resolver:Dependency ref="myLDAP" />
>>        <resolver:AttributeEncoder xsi:type="enc:SAML2String" name="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress" friendlyName="mail" />
>>    </resolver:AttributeDefinition>
>>
>> and so forth.
>>
>> Then release those custom attributes to the SP in question.
>>
>> On Feb 27, 2014, at 6:20 PM, "Paul B. Henson" <henson at csupomona.edu>
>> wrote:
>>
>>> I've been asked to set up our shibboleth idp to work with smartsheet.com (some kind of online hosted project management service). Anybody here done that before?
>>>
>>> Reviewing their documentation:
>>>
>>> http://help.smartsheet.com/customer/portal/articles/516133-using-single-sign-on-saml
>>>
>>> It doesn't seem overly complicated; they don't belong to any federation and as such require ad hoc metadata maintenance :(, but they do explicitly list the shibboleth IDP as compatible with their SAML implementation (for whatever that's worth ;) ).
>>>
>>> It says they want four attributes asserted:
>>>
>>> urn:oasis:names:tc:SAML:2.0:nameid?format:persistent
>>> http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress
>>> http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname
>>> http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname
>>>
>>> The first one is of course quite familiar, but I'm not sure what to make of the other three; we do of course have attributes corresponding to that data, but I'm not quite clear on how to map them into the assertion in the format they are looking for?
>>>
>>> Thanks?
>>>
>>>
>>> --
>>> Paul B. Henson  |  (909) 979-6361  |  http://www.csupomona.edu/~henson/
>>> Operating Systems and Network Analyst  |  henson at csupomona.edu
>>> California State Polytechnic University  |  Pomona CA 91768
>>>
>>> --
>>> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
>>
>> --
>> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
>
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
>