Unsolicited SSO with no entity ID or metadata

[Ben Branch]

All,

I've recently been tasked with setting up SSO for a new hosted solution.  We don't have many Shibboleth based services, but once I understood how everything worked, it's been pretty easy going.  With that said, I've run into my first "problem child".  The vendor in question is advising that they do not do SP-Initiated SSO and only support Idp-Initiated (unsolicited SSO).  I asked them to provide me with the entity ID and the metadata and they advised that they do not publish their metadata, nor their entity ID.  The only piece of information that they were willing to provide me was the SAML endpoint. So, with that said, here are my questions:


1.       If I don't have the entity id or the metadata, how am I supposed to properly configure the RelyingParty?

2.       If I don't have the entity id, how am supposed to configure the attributes to be released to the right service?

3.       Because this is Idp-Initiated SSO, do I need to build a metadata file for them on my side rather than having them provide me one?

I'm really at a loss right now.  I've been pouring over the Shibboleth wiki and Google looking for anything that can help me understand Idp-Initiated SSO.  There is an old post from this users list that appears to have a few pastebin links to the metadata that the submitter used, but they have since been removed from pastebin, so I am unable to see how they configured their metadata.


Ben Branch
UNIX/Linux Administrator
University of Central Oklahoma
ITIL Foundation v3, Network+, RHCE

100 N. University Drive, Box 122
Edmond, OK 73034
D: 405.974.2649 | M: 405.550.6804 | bbranch at uco.<mailto:bbranch at uco.>edu | www.uco.edu<http://www.uco.edu/>

"I am wiser than this man, for neither of us appears to know anything great and good; but he fancies he knows something, although he knows nothing; whereas I, as I do not know anything, so I do not fancy I do. In this trifling particular, then, I appear to be wiser than he, because I do not fancy I know what I do not know."  - Socrates

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160105/cfa59ef8/attachment.html>