servicenow SAML 2 integration

[Dave Perry]

Side note - the use of 'pissing' and 'prick' triggered our spam filter's Swear In policy (usually I just get a daily email with messages I need to delete/release and can do this myself, but 2 of these messages caused virtual alarm bells).

Dave
_________________________________________________
Dave Perry
eLearning Technologist, Hull College Group

Room L34 - Queens Gardens Library
Wilberforce Drive, Queen's Gardens, Hull, HU1 3DG
Extension 2230 / Direct Dial 01482 381930

Please rate our service in the annual Libraries & eLearning User survey.
You could win a £15 Amazon voucher!
For staff - http://library.hull-college.ac.uk/staffsurvey 
For students - http://library.hull-college.ac.uk/survey 


-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Michael R. Gettes
Sent: 08 May 2014 16:40
To: Shib Users
Subject: Re: servicenow SAML 2 integration

FWIW, I do not use saml2int… i find the people (vendors) i deal with tend not to understand stuff.  (i’m trying to be nice here).  the servicenow guys were certainly an exception - they had significant clue on real security issues as well as UI and all sorts of stuff.  I enjoyed my interactions with them.  And, those of you who know me, i’m a prick when it comes to vendors (no further comment please, I know i tee’d one up for many of you).  If I ever need to really hit someone over the head with standards and tech stuff, I’m gonna bring in other schools and other experts cause just pointing to a document tends not to work these days… again, this is my opinion and my experience on how I solve problems with vendors.
I find this to be a rather sad state of affairs.

I can certainly imagine others being more successful than I employing tools like saml2int.

/mrg

On May 8, 2014, at 11:04 AM, Cantor, Scott <cantor.2 at osu.edu> wrote:

> On 5/8/14, 10:16 AM, "Michael R. Gettes" <gettes at cmu.edu> wrote:
>> 
>> as a couple of folks have askedŠ  here is the contract language we use.
>> When the company refuses to do InCommon we come up something custom 
>> but along similar lines.  From my experience I have decided to NOT 
>> promote SAML in contract and to specify shibboleth compatibility 
>> because I have had too many cases of a vendor saying ³we do SAML² and 
>> then it becomes a pissing contest on what means SAML so I decided to 
>> pursue the product compatibility path and I have had much greater success with this path.
> 
> Coincidentally, I was recently discussing internally whether to invest 
> any cycles in updating the saml2int profile, which you probably recall 
> was intended to help with that problem. It would be useful to me to 
> know if people are using that for this kind of purpose. If not, it's 
> not a good use of the project's time to bother with it.
> 
> -- Scott
> 
> 
> --
> To unsubscribe from this list send an email to 
> users-unsubscribe at shibboleth.net

--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net

**********************************************************************
This message is sent in confidence for the addressee
only. It may  contain confidential or sensitive
information.  The contents are not to be disclosed
to anyone other than the addressee.  Unauthorised
recipients are requested to preserve this
confidentiality and to advise us of any errors in
transmission.  Any views expressed in this message
are solely the views of the individual and do not
represent the views of the College.  Nothing in this
message should be construed as creating a contract.

Hull College owns the email infrastructure, including the contents.

Hull College is committed to sustainability, please reflect before printing this email.
**********************************************************************

TEXT