[EXTERNAL] RE: InCommon Issues

[Tom Scavo]

Hi Rashed,

On Wed, Nov 30, 2016 at 9:10 AM, Kabir, Rashed <RKabir at wcupa.edu> wrote:
>
> Still trying to resolve this is issue of any vendor SP's consuming our metadata going through inCommon are not getting any attributes even though we are releasing it on our end.
>
> I tested with aacli.  Also tested it on https://service1.internet2.edu/test/ and it works fine there.
>
> But failing on the following (example)
>
> https://lists.incommon.org/sympa/sso_login/InCommon/init/sso_login_succeeded/InCommon
>
> and
>
> https://cm.maxient.com/ssotest.php?method=SAML&school=wcupa

I'll suggest that you configure your IdP to support the Research &
Scholarship category: https://spaces.internet2.edu/x/ionwAg

That would seem to be a good intermediate step.

Tom

> ________________________________________
> From: users [users-bounces at shibboleth.net] on behalf of Piscitello, Frank [FPiscitello at wcupa.edu]
> Sent: October 17, 2016 2:10 PM
> To: users at shibboleth.net
> Subject: InCommon Issues
>
> For some reason, I can't log in with our Shib 3 IdP for InCommon SP systems. Below is my filter.xml. Any thoughts?
>
> <AttributeFilterPolicyGroup id="ShibbolethFilterPolicy"
>         xmlns="urn:mace:shibboleth:2.0:afp"
>         xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
>         xsi:schemaLocation="urn:mace:shibboleth:2.0:afp http://shibboleth.net/schema/idp/shibboleth-afp.x
> sd">
>
>     <!-- Release some attributes to an SP. -->
>     <AttributeFilterPolicy id="example1">
>         <PolicyRequirementRule xsi:type="Requester" value="https://fm.incommon.org/sp" />
>
>         <AttributeRule attributeID="eduPersonPrincipalName">
>             <PermitValueRule xsi:type="ANY" />
>         </AttributeRule>
>
>         <AttributeRule attributeID="givenName">
>             <PermitValueRule xsi:type="ANY" />
>         </AttributeRule>
>
>         <AttributeRule attributeID="surname">
>             <PermitValueRule xsi:type="ANY" />
>         </AttributeRule>
>
>         <AttributeRule attributeID="commonName">
>             <PermitValueRule xsi:type="ANY" />
>         </AttributeRule>
>
>         <AttributeRule attributeID="mail">
>             <PermitValueRule xsi:type="ANY" />
>         </AttributeRule>
>     </AttributeFilterPolicy>
>
> [NCSAM+Champion+SM]<http://www.dhs.gov/national-cyber-security-awareness-month>
> Frank J. Piscitello, Jr., CISSP<https://www.youracclaim.com/badges/f057110b-f57e-4ad6-b4dd-342efd4bb5d8/public_url>
> Information Security Manager
> West Chester University of PA
>
>
>
>
>
> Networking & Telecom / Information Security West Chester, PA 19383
> Ph: 610-436-3192 | Fax: 610-436-3110
> FPiscitello at wcupa.edu<mailto:FPiscitello at wcupa.edu>
> http://wcupa.edu/infoservices/security/
>
> #CyberAware
>
>
>
> ________________________________
>
> This email originated from an off-campus sender. Please be cautious and treat links and attachments with care.
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net