Docusign [IdP configuration Solved]

Dr_Natas Juan.Rios at csuci.edu
Wed Dec 7 15:37:04 EST 2016


In hopes that this will save some time for someone in the future, and hope
they learn from my mistakes. The main key for docusing is to make sure you
adjust the custom attribute mapping accordingly. Also, keep in mind this is
only for the test environment for docusign. 

"attribute-filter.xml"
 
<afp:AttributeFilterPolicy id="docusign">
    <afp:PolicyRequirementRule xsi:type="basic:AttributeRequesterString"
value="https://account-d.docusign.com/organizations/37269197-2dd0-49da-8668-526cfe2e4c56/saml2"
/>
    
    <afp:AttributeRule attributeID="EIDDocusign">
          <afp:PermitValueRule xsi:type="basic:ANY" />
    </afp:AttributeRule>    
    <afp:AttributeRule attributeID="mail">
          <afp:PermitValueRule xsi:type="basic:ANY" />
    </afp:AttributeRule>
    <afp:AttributeRule attributeID="givenName">
          <afp:PermitValueRule xsi:type="basic:ANY" />
    </afp:AttributeRule>
    <afp:AttributeRule attributeID="surname">
          <afp:PermitValueRule xsi:type="basic:ANY" />
    </afp:AttributeRule>
</afp:AttributeFilterPolicy>


"metadata-providers.xml"
      <MetadataProvider id="docusign"
            xsi:type="FileBackedHTTPMetadataProvider"
             xmlns="urn:mace:shibboleth:2.0:metadata"
            
metadataURL="https://account-d.docusign.com/organizations/37269197-2dd0-49da-8668-526cfe2e4c56/saml2/metadata"
            
backingFile="/opt/shibboleth-idp/metadata/docusign-metadata.xml" />



"saml-nameid.xml"
       <bean parent="shibboleth.SAML2AttributeSourcedGenerator"
            p:format="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent"
            p:attributeSourceIds="#{ {'EIDDocusign'} }">
            <property name="activationCondition">
                <bean parent="shibboleth.Conditions.RelyingPartyId"
c:candidate="https://account-d.docusign.com/organizations/37269197-2dd0-49da-8668-526cfe2e4c56/saml2"
/>
            </property>
        </bean>


"attribute-resolover.xml"
     
    <resolver:AttributeDefinition xsi:type="ad:Simple" id="EIDDocusign"
sourceAttributeID ="employeeID"> 
        <resolver:Dependency ref="myLDAP" /> 
        <resolver:AttributeEncoder xsi:type="SAML2StringNameID"
xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
nameFormat="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent" /> 
    </resolver:AttributeDefinition> 



<http://shibboleth.1660669.n2.nabble.com/file/n7630151/docusign.png> 






-----
Thank you!
--
View this message in context: http://shibboleth.1660669.n2.nabble.com/Docusign-IdP-configuration-Solved-tp7630151.html
Sent from the Shibboleth - Users mailing list archive at Nabble.com.


More information about the users mailing list