ArcGIS on Shib 3

[McKean, Brandon Scott - mckeanbs]

Understood, specifically the problem we get is on sign-in:
Unable to login using Idp User name is invalid, we are not able create 
this 
'AAdzZWNyZXQxM5JTIOlSYqZoH/iR0kKuxuDJU3xpBoZEjVIvDiPh9waP1uzFxFuDDSRuyQ
ropDch4QqkOuNKlqHkVwRsFKvSYGOlviHTzqTAurhwZoFYrIwghICM6scHxePa'
 in our system
From what I can tell from the SAML Tracer results, the part corresponds
with what's in the NameID section:
<saml2:NameID Format="urn:oasis:names:tc:SAML:2.0:nameid
-format:transient"
                          NameQualifier="https://it
-federation2.jmu.edu/idp/shibboleth"
                          SPNameQualifier="JMU.maps.arcgis.com"
                         
>AAdzZWNyZXQxXb/rYm+ZcnLKv3HiQasbsmUCyznIMh4K2vAcCpEc6+BQm3kwBsjsKYJjVt
nK6f6OGA5rWbejVo7Xh8SCKIKYhPLBUORj2gGOOUFC8pvywaocc5FDw71icBw+</saml2:N
ameID>
As I understand it, they need this to be in plaintext, and they believe
this result to be indicative of encryption being enabled, even though I
have encrypted assertions off and NameID encryption isn't default
anymore in Shib 3.
I hope this makes sense.


-- 
Brandon McKean
IT / Systems
Linux Administrator
(540)568-4235

On Thu, 2015-06-25 at 15:09 +0200, Peter Schober wrote:
> * McKean, Brandon Scott - mckeanbs <mckeanbs at jmu.edu> [2015-06-25
> 14:56]:
> > The attribute resolver and attribute filter I can more or less
> > directly
> > place into Shib 3, and turnining off assertion encryption I figured
> > out
> > how to do from my previous question on here.
> 
> It would help to know what it is that does /not/ work.
> -peter
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20150625/cf4c52a5/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 5673 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/users/attachments/20150625/cf4c52a5/attachment.bin>