Blackboard Transact & IDP 3.x

[King Huang]

Hi Philip,

I’m curious if you’ve figured out how to get Bb Transact and IdP 3 working together? We’re just starting on connecting the two, and we’re rather lost on what to do for Bb Transact.

The only information we’ve gotten from Blackboard is that they’ve inserted our AttributeQuery and SSO URLs, and “it doesn’t work”. They don’t seem to know what to do with our IdP metadata. IdP 3 support is purportedly coming in the future.

Thanks,

King Chung Huang

King Chung Huang ｜ Information Technologies, University of Calgary ｜ ☎ 403-383-3254

On Mar 15, 2016, at 8:01 AM, Rawlinson, Philip (rawlinpa) <RAWLINPA at UCMAIL.UC.EDU<mailto:RAWLINPA at ucmail.uc.edu>> wrote:

Alan,

Were you able to get Blackboard Transact working with IdP 3.x? We are running into issues as well. After finding this thread, we tried SHA-1 as well per this wiki page, but it did not resolve the issue:
https://wiki.shibboleth.net/confluence/display/IDP30/SecurityConfiguration#SecurityConfiguration-SigningandEncryptionConfiguration
Re-reading your original post, we are not running in Legacy mode like you are.

We have had IdP 2.x working for a couple of years with no issues once we got past the FriendyName issues. We are trying to move to IdP 3.2.1 but Blackboard Transact is the main application preventing us from upgrading right now. We have several other SPs doing Attribute Queries over the back-channel and those are working fine when we do a test cutover in Production. For Transact though, when we view the idp-process.log file, we see the HTTP POSTs but not the SOAP requests. The IdP Attribute Query URL is staying the same and we are not making any changes on the Transact SP side. We are running Jetty 9.3 with a separate 8443 port for back-channel traffic as described here: https://wiki.shibboleth.net/confluence/display/IDP30/Jetty93#Jetty93-SupportingSOAPEndpoints

Help from anyone who has Blackboard Transact working with Shibboleth 3.x would be appreciated.

Philip

-----Original Message-----
From: Powell, Alan [mailto:powela at rpi.edu]
Sent: Wednesday, February 24, 2016 4:58 PM
To: users at shibboleth.net
Subject: RE: Blackboard Transact & IDP 3.x




I was able to get Blackboard Transact to work with our IDP, running
2.x. a  while ago. I can't, however, get it to work with IDP 3.x
running in legacy  mode.

Same resolver config, same attributes and NameID being issued?

Did you try backing off from SHA-2 to SHA-1? The default in legacy mode
is still SHA-2, that's a little bit odd but we were trying to make sure
people didn't end up stuck on SHA-1 forever.

-- Scott


Yes, same config, same attributes and NameID. I will look at SHA-1 versus SHA-2, however, as that could very well be the problem. Thank you for the suggestion.

Alan


--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160328/2f6c144f/attachment-0001.html>