Box.com and Shibboleth

[Cantor, Scott]

> There is something screwy with my log file now that I'm looking it over again.

There's nothing screwy, there's just no indication you released any attributes to Box.

> Should it have
> "box.net|http://shibboleth.net/ns/profiles/saml2/sso/browser" that
> shibboleth.net URL there?

Well, I already expressed my opinion that the real Box entityID isn't supposed to be box.net, but apparently that still exists. I thought they had shut that down but I imagine they had hundreds of enterprises using it and couldn't really move them all.

> Maybe I should setup InCommon's metadata file on this server?

If you're an InCommon member, you should be federating with Box via the InCommon metadata and not need anything else.

If not, that would be a Box question I guess, but the fact is that their metadata should be what it is, InCommon or not. Consuming the InCommon metadata doesn't really require being a member.

Either way, I don't know what you're releasing attributes to in your filter, but obviously it needs to match.

-- Scott