Integrating idp3 with cirqlive

[Joseph Fischetti]

I've been asked to look into integrating cirqlive with our existing IDP 3 installation. Cirqlive adds a link between Sakai and webex sso.  During my research I found that cirqlive expects the private key of our IDP so that it can sign the assertions that it sends to WebEx. 

Obvious security concerns aside, when I reached out to cirqlive for clarification, I received the following PDF in reply.  It seems that, given architecture 1 (page 3), they feel that sharing the idp's private key is okay. They also reference using separate keys for different SPs, which as far as im aware, isn't possible with IDP 3.

https://documentation.cirqlive.com/manuals/SSO/Multi-Source_SAML_Authentication_with_WebEx_(MEETS).pdf

Does anybody else have experience with this?

Joseph Fischetti
Linux System Administrator
Marist College
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170822/0f4d063d/attachment-0001.html>