ArcGIS on Shib 3

[Tony Skalski]

Brandon,

Are you seeing surname and email address flow into Arcgis.com? We have been
able to get the auth to work but unable to get surname and email address
working.

On Thursday, June 25, 2015, McKean, Brandon Scott - mckeanbs <
mckeanbs at jmu.edu> wrote:

> Thanks for the tip! Turns out I was confused of the use of the config
> files. I was putting these things in attribute-resolver-ldap.xml rather
> than attribute-resolver.xml Having put them into the right place they now
> work as expected.
>
> Brandon McKean
>
> On Thu, 2015-06-25 at 21:53 +0200, Peter Schober wrote:
>
> * McKean, Brandon Scott - mckeanbs <mckeanbs at jmu.edu <javascript:_e(%7B%7D,'cvml','mckeanbs at jmu.edu');>> [2015-06-25 21:46]:
>
>
> The first one being the mail attribute definition. I see it's set to
> construct that from the uid and add a domain of your choosing, but I
> was hoping to get that pulled straight from LDAP. Is there a way to
> do that?
>
>
>
> Sure, if the software couldn't pass around email addresses, but only
> uids, that would be pretty broken.
>
>
>
> <resolver:AttributeDefinition id="mail" xsi:type="ad:Simple">
>
> <resolver:AttributeEncoder xsi:type="enc:SAML1String"
> name="urn:mace:dir:attribute-def:mail" encodeType="false" />
>
> <resolver:AttributeEncoder xsi:type="enc:SAML2String"
> name="urn:oid:0.9.2342.19200300.100.1.3" friendlyName="mail"
> encodeType="false" />
> </resolver:AttributeDefinition>
>
>
>
> Your previously sent version looked better, as it included
> sourceAttributeID="mail" in the AttributeDefinition and a child
> element of <resolver:Dependency ref="jmuad" /> referencing the
> DataConnector that should be able to provide the "mail" attribute.
> They're both missing from your example above.
>
> But do consult the documentation, for IDPv3 it's this (or something in
> that vicinity):https://wiki.shibboleth.net/confluence/display/IDP30/AttributeDefinitionConfiguration
> -peter
>
>

-- 
Tony Skalski
Systems Administrator
ajs at stolaf.edu
507-786-3227
St. Olaf College
Information Technology
1510 St. Olaf Avenue
Northfield, MN    55057-1097
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20150625/f27a73d9/attachment.html>