Google integration with SP

[Izz Noland]

When I say, "an institution," I mean another entity that uses Google for authentication services on campus.  This is not us.  I want to treat them just like any other university we do shibboleth authentication with and allow them to login to our application (authenticate against our SP) with their Google creds, just as most would do via our SP to their IdP, establishing a session within our app.

I literally want to be able to identify Google the same as an IdP in our IdP <-> SP relationship.  
1. Person X wants to access our application so they go to our website, select Login, and select his / her school.
2. A redirect to Google happens where he / she logs in with Google creds
3. Attributes are sent to our SP for consumption after successful auth and Person X is logged into our application

If there is a way to use OpenID directly and it integrate through Shibboleth, great, if this sounds to require a lot of SP work and customization, then I will allow the devs to complete the integration efforts using the API instead of traversing our SP.

I hope that clears it up some.

Thanks,
Izz

Izz Noland
Sr. Systems Engineer
izz.noland at wepanow.com
Toll Free 1.800.675.7639
100 Gilbert Drive | Alabaster, Alabama 35007


-----Original Message-----
From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Pete Birkinshaw
Sent: Friday, January 08, 2016 11:04 AM
To: Shib Users <users at shibboleth.net>
Subject: Re: Google integration with SP

> 
> On 8 Jan 2016, at 16:57, Tom Scavo <trscavo at gmail.com> wrote:
> 
> On Fri, Jan 8, 2016 at 11:19 AM, Izz Noland <izz.noland at wepanow.com> wrote:
>> 
>> I’ve seen a few and emails back and forth for IdPs to integrate with Google, but can we as an SP receive attributes from Google?
> 
> Well, Google does not play the role of SAML IdP. However, Google *is* 
> an OpenID Connect Provider so there is hope (depending on what you 
> really want to do).
> 



This has recently changed for some situations  - Google Apps (not vanilla Google) can now be used as a SAML IdP (although a rather limited one)


  https://support.google.com/a/answer/6087519?hl=en



Pete


--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net