Cannot get Instructure SP working with IdP version 3

[Michael A Grady]

> On Jul 14, 2016, at 5:42 PM, Cantor, Scott <cantor.2 at OSU.EDU> wrote:
> 
>> Canvas is happy to take eduPersonPrincipalName (any you can tell it to use if
>> with or without the suffix, depending on what form of Id you send in your
>> provisioning feed.)
> 
> Yes, but I suspect most campuses will need to use an identifier that's a bad fit for EPPN. I don't think I was able to use a custom Attribute, since I wouldn't be using the NameID if I could have.
> 

Yes, you are right, you can't specify the attribute.  There is one and only one choice for using an Attribute instead of a NameID, and that is EPPN. The only choice you have on that is "with or without suffix" (when it goes to match that against the LOGIN_ID they were sent in the provisioning feed.)

--
Michael A. Grady
IAM Architect, Unicon, Inc.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 842 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <http://shibboleth.net/pipermail/users/attachments/20160714/087e3123/attachment.sig>