Google Apps sso setup

[Dave Perry]

Well no combination is working so far. Another blog post I was directed to (which talks about setting up ADFS to SSO to google) said about putting the domain into the relying party entityID and the endpoint too.

And still getting the error that no relying party is configured for google.com.

Time to rope in their support I think.

Thanks for inputs,
Dave

_________________________________________________
Dave Perry
eLearning Technologist, Hull College Group

Room L34 - Queens Gardens Library
Wilberforce Drive, Queen's Gardens, Hull, HU1 3DG
Extension 2230 / Direct Dial 01482 381930

* Need a fast reply? Try elearning at hull-college.ac.uk<mailto:elearning at hull-college.ac.uk> *

From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Dave Perry
Sent: 05 September 2014 11:14
To: users at shibboleth.net
Subject: RE: Google Apps sso setup

Thanks Chuck, I hadn’t seen any mention I needed to add our domain name into the EntityID for the metadata.

I’m waiting to hear back on if this change works, if not I’ll try David G’s one.

_________________________________________________
Dave Perry
eLearning Technologist, Hull College Group

Room L34 - Queens Gardens Library
Wilberforce Drive, Queen's Gardens, Hull, HU1 3DG
Extension 2230 / Direct Dial 01482 381930

* Need a fast reply? Try elearning at hull-college.ac.uk<mailto:elearning at hull-college.ac.uk> *

From: chuck.kimber at aggiemail.usu.edu<mailto:chuck.kimber at aggiemail.usu.edu> [mailto:chuck.kimber at aggiemail.usu.edu] On Behalf Of Chuck Kimber
Sent: 04 September 2014 16:31
To: Dave Perry
Subject: Re: Google Apps sso setup



On Thu, Sep 4, 2014 at 8:27 AM, Dave Perry <Dave.Perry at hull-college.ac.uk<mailto:Dave.Perry at hull-college.ac.uk>> wrote:
And google-metadata.xml has the following:
<?xml version="1.0" encoding="utf-8"?>
<EntityDescriptor entityID="google.com<http://google.com>" xmlns="urn:oasis:names:tc:SAML:2.0:metadata">

Is that really the entityID for your google apps?  Try changing it to:

entityID="google.com<http://google.com/>/a/hull-college.ac.uk<https://www.google.com/a/hull-college.ac.uk/acs>"

This should allow your entityID's to match up with an sp out there in google land.
________________________________
This message is sent in confidence for the addressee only.  It may contain confidential or sensitive information.  The contents are not to be disclosed to anyone other than the addressee.  Unauthorised recipients are requested to preserve this confidentiality and to advise us of any errors in transmission.  Any views expressed in this message are solely the views of the individual and do not represent the views of the College.  Nothing in this message should be construed as creating a contract.

Hull College owns the email infrastructure, including the contents.

Hull College is committed to sustainability, please reflect before printing this email.
________________________________

**********************************************************************
This message is sent in confidence for the addressee
only. It may  contain confidential or sensitive
information.  The contents are not to be disclosed
to anyone other than the addressee.  Unauthorised
recipients are requested to preserve this
confidentiality and to advise us of any errors in
transmission.  Any views expressed in this message
are solely the views of the individual and do not
represent the views of the College.  Nothing in this
message should be construed as creating a contract.

Hull College owns the email infrastructure, including the contents.

Hull College is committed to sustainability, please reflect before printing this email.
**********************************************************************

TEXT
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20140909/87e9d37e/attachment-0001.html