Unsolicited SSO with no entity ID or metadata

[David Gersic]

As an example, you might see the "Concur Solutions" example in the wiki. They don't publish metadata, so you have to roll your own. Something similar will probably be what you need to do for whatever SP this is that you're working with.


________________________________
From: users <users-bounces at shibboleth.net> on behalf of Ben Branch <BBranch at uco.edu>
Sent: Tuesday, January 05, 2016 4:59 PM
To: 'users at shibboleth.net'
Subject: Unsolicited SSO with no entity ID or metadata


All,



I've recently been tasked with setting up SSO for a new hosted solution.  We don't have many Shibboleth based services, but once I understood how everything worked, it's been pretty easy going.  With that said, I've run into my first "problem child".  The vendor in question is advising that they do not do SP-Initiated SSO and only support Idp-Initiated (unsolicited SSO).  I asked them to provide me with the entity ID and the metadata and they advised that they do not publish their metadata, nor their entity ID.  The only piece of information that they were willing to provide me was the SAML endpoint. So, with that said, here are my questions:



1.       If I don't have the entity id or the metadata, how am I supposed to properly configure the RelyingParty?

2.       If I don't have the entity id, how am supposed to configure the attributes to be released to the right service?

3.       Because this is Idp-Initiated SSO, do I need to build a metadata file for them on my side rather than having them provide me one?



I'm really at a loss right now.  I've been pouring over the Shibboleth wiki and Google looking for anything that can help me understand Idp-Initiated SSO.  There is an old post from this users list that appears to have a few pastebin links to the metadata that the submitter used, but they have since been removed from pastebin, so I am unable to see how they configured their metadata.





Ben Branch
UNIX/Linux Administrator

University of Central Oklahoma

ITIL Foundation v3, Network+, RHCE

100 N. University Drive, Box 122

Edmond, OK 73034

D: 405.974.2649 | M: 405.550.6804 | bbranch at uco.<mailto:bbranch at uco.>edu | www.uco.edu<http://www.uco.edu/>



"I am wiser than this man, for neither of us appears to know anything great and good; but he fancies he knows something, although he knows nothing; whereas I, as I do not know anything, so I do not fancy I do. In this trifling particular, then, I appear to be wiser than he, because I do not fancy I know what I do not know."  - Socrates


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160106/34c6b3f0/attachment.html>