Shibboleth IdP with Webex

[Andrew Morgan]

On Thu, 5 Nov 2015, Sacilowski, Tadeusz wrote:

> Andrew,
>
> Thanks so much for the clarification. Apparently I had the NameID coming
> across through a different attribute. My issue was a malformed email
> attribute that I needed to scope properly (it's a scripted attribute built
> from our UIDs... long story). Either way, your reply helped me understand
> and address the issue properly.
>
> I do have one more questions, if I may. How are you creating the "
> modifytimestamp" attribute that you reference?
>
> <resolver:AttributeDefinition xsi:type="ad:Simple"
> id="webex_updatetimestamp" sourceAttributeID="modifytimestamp">
>    <resolver:Dependency ref="ONIDLDAP" />
>    <resolver:AttributeEncoder xsi:type="enc:SAML2String"
> name="updateTimeStamp" />
> </resolver:AttributeDefinition>

In my LDAP data connector, I fetch the operational attribute named 
"modifytimestamp":

     <resolver:DataConnector id="ONIDLDAP" xsi:type="dc:LDAPDirectory"
         ...
         <dc:ReturnAttributes>* ismemberof modifytimestamp</dc:ReturnAttributes>
     </resolver:DataConnector>


Webex accepts a couple different time formats, including this:

   modifytimestamp: 20151105235747Z


 	Andy