box.com / IDP 3.x

[Cantor, Scott]

On 6/8/16, 7:08 AM, "users on behalf of Powell, Alan" <users-bounces at shibboleth.net on behalf of powela at rpi.edu> wrote:

>We are testing box as an InCommon member. I can’t get authentication to work even though it
> appears I am doing the right thing. My preference is to make sure it works with IDP
> 3.x. Can anyone who is using box provide any insight, ideally with IDP 3.x?

There's nothing version-specific about it.

>The examples I’ve encountered seem to just indicate you do the typical Shib thing of
> releasing attributes but don’t you need to have the email be in the SAML subject in
> addition?

No.

>I release this attribute and sn and givenName to box. 

Then either that's not happening or you don't have the Box end configured, users in place, etc.
 
>To get the correct nameid format, to use SHA1 which seemingly is the the only thing that
> works and to prevent encryption I do this:

All of that is unnecessary.

-- Scott