servicenow SAML 2 integration

Michael R. Gettes gettes at
Sun May 18 14:52:25 EDT 2014

Update from ServiceNow
available in their Eureka release.  No, I have no idea when Eureka comes out or if it is already out.


On May 8, 2014, at 10:16 AM, Michael R. Gettes <gettes at<mailto:gettes at>> wrote:

as a couple of folks have asked…  here is the contract language we use.  When the company refuses to do InCommon we come up something custom but along similar lines.  From my experience I have decided to NOT promote SAML in contract and to specify shibboleth compatibility because I have had too many cases of a vendor saying “we do SAML” and then it becomes a pissing contest on what means SAML so I decided to pursue the product compatibility path and I have had much greater success with this path.  We’ve been using this language (and derivates of it) for about 2 years now.  Our contracts office is actively involved and promotes this language along with our ISO.  We remain challenged with other parts of the University understanding the need for such language in contracts so not all contracts have this language but we are getting better at it as time goes on.

I realize this list is Shibboleth specific and not InCommon - but this is all about promoting shib so I think it is pertinent to the list.   My apologies to those who feel otherwise.


COMPANY will join the InCommon Federation, remain a member in good standing and utilize the shibboleth software or software known to be compatible with the latest versions of Shibboleth software (shibboleth software can be found at<>).  Carnegie Mellon University will determine appropriate compatibility of software.  InCommon Federation metadata will be used to securely maintain the trust relationship between the Carnegie Mellon University’s Shibboleth identity provider and Supplier’s Shibboleth service provider.  Carnegie Mellon University’s identity provider will provide identities in the form of user at<mailto:user at> as attributes to the COMPANY service provider.  Additional attributes may also be provided based on negotiations between COMPANY and Carnegie Mellon University. Carnegie Mellon University will sponsor the COMPANY membership in InCommon Federation if requested.

On May 7, 2014, at 9:23 PM, Paul B. Henson <henson at<mailto:henson at>> wrote:

From: Michael R. Gettes
Sent: Wednesday, May 07, 2014 3:32 PM

been rather busy so haven't had a chance to respond to all of this... CMU has
worked with ServiceNow to get the functionality into ServiceNow (what you
describe below).  We included the need for all this in our contract with them.

Sir, we owe you and your campus a debt of gratitude :). I guess your contract must have been larger than ours, or your management more tenacious, as whenever I try to push our management into demanding decent implementations from the companies they do business with it doesn't usually happen <sigh>.

I told the consultants that were hired to build our ServiceNow instance to tell them we want the "CMU Package" ;), guess we'll see what happens.

Thanks much...

Paul B. Henson  |  (909) 979-6361  |
Operating Systems and Network Analyst  |  henson at<mailto:henson at>
California State Polytechnic University  |  Pomona CA 91768

To unsubscribe from this list send an email to users-unsubscribe at<mailto:users-unsubscribe at>

To unsubscribe from this list send an email to users-unsubscribe at<mailto:users-unsubscribe at>

-------------- next part --------------
An HTML attachment was scrubbed...

More information about the users mailing list