Blackboard Transact and IdP 3

[IAM David Bantz]

On Tue, May 24, 2016 at 10:55 AM, Cantor, Scott <cantor.2 at osu.edu> wrote:

> > Ugghh. With "something like ePPN" as value?
> > Getting worse still.
>
> That's probably not a requirement, I doubt they care or notice what's in
> it.
>

As I recall (perhaps incorrectly) they did require username at domain to
identify the user record.

>
> People make lots of assumptions and do things with trial and error rather
> than systematically.
>

Certainly true in this case; vendor totally unwilling and/or unable to
provide guidance or describe requirements.

>
> > Care to share your configuration how you got the Shib IDP to resolve
> > incoming (as part of Attribute Queries) NameIDs of type transient (!)
> > with "something like ePPN" as the value?
> > Even thinking about that makes my head hurt.
>
>
I don't recall doing anything more than adding the relying-party config I
just shared, which includes the line:

<ProfileConfiguration xsi:type="saml:SAML2AttributeQueryProfile"
encryptAssertions="never" encryptNameIds="never" />
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160524/cb505785/attachment-0001.html>