Box.com and Shibboleth

[Cantor, Scott]

> It is working! So for a lark I added the mail attribute
> (oid:0.9.2342.19200300.100.1.3) to the attribute-filter.xml file in
> addition to eduPersonPrincipalName (oid:0.9.2342.19200300.100.1.3) which
> was the recommended field on the wiki page and by Box. Turns out that
> they really just wanted mail. Is this what other people have used?

That is what we are using, yes. I do know that they require the identifier be an email address. I don't know what they can accomodate but probably they have to manually make adjustments to specifically allow for what any given IdP is sending them (given they're not using Shibboleth and the idiocy of this apparently hasn't occurred to the implementer they do use).

-- Scott