ArcGIS on Shib 3

[Peter Schober]

* McKean, Brandon Scott - mckeanbs <mckeanbs at jmu.edu> [2015-06-25 14:56]:
> The documentation they put out there is here:
> https://doc.arcgis.com/en/arcgis-online/reference/configure-shibboleth.htm

>From that and your error message it seems they will accept/try to use
/any/ kind of NameID, which is good (as their example of putting the
principal name into an "unspecified" NameID isn't what you'd consider
best practices).

Also they seem to expect "basic" NameFormat attributes ("mail",
instead of "urn:oid:0.9.2342.19200300.100.1.3), and are confused about
the semantics of "givenName" (which is the "given name" or first name,
not the subject's "full name", as they seem to use it):

  "When a user signs in using an enterprise login and if ArcGIS Online
  receives attributes with the names givenname and email or mail (in
  any case), ArcGIS Online populates the full name and the email
  address of the user account with the values received from the
  identity provider."

But figure out your NameID issue first and leave attributes for later.
-peter