OnBase help ? SAML claim type ?

[Robert Roll]

Thanks Scott..

> Is this OnBase an EDM / document imaging product? We have that, but it's on site, and they abandoned trying to use SAML with it. 
> Sounds like this is a hosted version maybe?

Yes, this is the Document/Imaging product and yes, this is their hosted solution...

> SAML defines the form variable used, but I don't know know if that's what they mean,
> but that does not sound like an SP implementation I'd trust, so take care if security matters to you.

Sorry, but I'm still not sure what the SAML form variable is ? 
I'll probably have to let others decide the security risk factors. Right now,
I think the target audience is fairly small...

Again thanks,

Robert

________________________________________
From: users [users-bounces at shibboleth.net] on behalf of Cantor, Scott [cantor.2 at osu.edu]
Sent: Monday, December 14, 2015 8:21 AM
To: Shib Users
Subject: Re: OnBase help ? SAML claim type  ?

On 12/14/15, 10:10 AM, "users on behalf of Robert Roll" <users-bounces at shibboleth.net on behalf of Robert.Roll at utah.edu> wrote:



>
> I'm trying to work with OnBase to configure SSO.
>
>I told them the EPPN is our username  and sent them the EPPN definition from the attribute resolver file and
>they sent the below back.. Does anyone know what they mean by
>
>... "we need the variable that'll hold the SAML response and the claim type that'll hold the user's name."
>
>Again, the "variable" that will hold our user name is simply the EPPN.. I don't know what they mean by "claim"?

Claim is what everybody that decided they didn't like SAML calls Attributes. So the claim is EPPN and you sent them that, based on what you wrote. I have no idea what the heck "variable that'll hold the SAML response" means.

SAML defines the form variable used, but I don't know know if that's what they mean, but that does not sound like an SP implementation I'd trust, so take care if security matters to you.

Is this OnBase an EDM / document imaging product? We have that, but it's on site, and they abandoned trying to use SAML with it. Sounds like this is a hosted version maybe?

-- Scott

--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net