users Digest, Vol 69, Issue 150

Wed Mar 29 16:16:16 EDT 2017

Thanks Scott and David for your replys. 
I'll give your thought a try David and see if I can get the SAML to display what the SP needs. 

Thanks,

Mary  

-----Original Message-----
From: users [mailto:users-bounces at shibboleth.net] On Behalf Of users-request at shibboleth.net
Sent: Wednesday, March 29, 2017 10:17 AM
To: users at shibboleth.net
Subject: users Digest, Vol 69, Issue 150

Send users mailing list submissions to
	users at shibboleth.net

To subscribe or unsubscribe via the World Wide Web, visit
	http://shibboleth.net/mailman/listinfo/users
or, via email, send a message with subject or body 'help' to
	users-request at shibboleth.net

You can reach the person managing the list at
	users-owner at shibboleth.net

When replying, please edit your Subject line so it is more specific than "Re: Contents of users digest..."

Today's Topics:

   1. Re: mapping attributes (IAM David Bantz)
   2. Commercial Product using Shibboleth SP (Vipin Jain)

----------------------------------------------------------------------

Message: 1
Date: Wed, 29 Mar 2017 08:43:44 -0800
From: IAM David Bantz <dabantz at alaska.edu>
To: Shib Users <users at shibboleth.net>
Subject: Re: mapping attributes
Message-ID:
	<CAJ9XvwHJE9Mry53OKKzQG=sorwkdi22axe+nQN5t0g317X_NzQ at mail.gmail.com>
Content-Type: text/plain; charset="utf-8"

Scott described proper behavior and coordination between IdP and SP.
However there are intransigent SPs that expect the SAML to express something in the SP's made-up name space, such as a particular name or friendlyName in the assertion. You can (mis-)use the IdP to send something like they expect (after admonishing the SP and failing to get them to cast the scales from their eyes) by adding an attribute with non-standard AttributeEncoder in the attribute-resolver.mxl using the name and/or friendlyName they require, and releasing that attribute to the miscreant SP in attribute-filter.xml.

David Bantz

On Wed, Mar 29, 2017 at 8:09 AM, Cantor, Scott <cantor.2 at osu.edu> wrote:

> On 3/29/17, 12:06 PM, "users on behalf of Mary Wiegand" < 
> users-bounces at shibboleth.net on behalf of mwiegand at bastyr.edu> wrote:
>
> > Has anyone run into an issue where they needed ldap attributes to 
> > show
> up as something else entirely to the SP?
>
> The SP doesn't see any LDAP attributes, it sees SAML, and only through 
> a mapping layer that's entirely up to the SP. In other words, this is 
> how it works, already.
>
> > I?m expecting that I need to map my attribute in the filter so that 
> > is
> displays as what the SP needs to see,
>
> If you're talking about the IdP, no. You have nothing to do with it.
>
> -- Scott
>
>
>
> --
> To unsubscribe from this list send an email to 
> users-unsubscribe at shibboleth.net
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170329/ca5a4956/attachment-0001.html>

------------------------------

Message: 2
Date: Wed, 29 Mar 2017 22:46:30 +0530
From: Vipin Jain <vjain at simeiosolutions.com>
To: Shib Users <users at shibboleth.net>
Subject: Commercial Product using Shibboleth SP
Message-ID:
	<CAPWcJtdquGGADyC+VX0u5ji47JtO1tujWtKvPHzKRfVebXjh0w at mail.gmail.com>
Content-Type: text/plain; charset="utf-8"

Hi Team

Do we have any commercial product which uses Shibboleth SP as part of it.

Vipin Jain | [m] +91-95388-13805

Identity:  Secure, Intelligent, Managed
http://www.simeiosolutions.com/

Simeio Receives Highest Score
<https://www.simeiosolutions.com/home/pr-10-25-2016.html> by *Gartner* in Traditional/Legacy Workforce IDaaS Use Case
[image: bird, blue, logo, marketing, media, network, online, social,
twitter icon] <https://twitter.com/Simeio>    [image: facebook, fb,
network, social, white icon] <https://www.facebook.com/Simeio>    [image:
blue, box, linkedin, social icon]
<https://www.simeiosolutions.com/home/website_linkedin?trid=1000001841527&uid=1927d4cbEcreg1p6m>
Simeio Customers <https://www.youtube.com/watch?v=i5FiIRx3cHY>

--
The information in this message may contain confidential information and may be legally privileged. It is intended solely for the individual(s) named. Access to this email by anyone else is unauthorized. Please notify the sender immediately if you have received this email by mistake and delete this email from your system. If you are not the intended recipient, any disclosure, copying, distribution or any action taken or omitted to be taken in reliance on it, is prohibited and may be unlawful. Email transmission cannot be guaranteed to be secure or error-free, as information could be intercepted, corrupted, lost, destroyed, arrive late or incomplete, or contain viruses. When addressed to our clients any decisions or recommendations contained in this email are subject to the terms and conditions expressed our contract and related statement of work
letter(s)
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170329/e6310ce5/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image003.png
Type: image/png
Size: 1257 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/users/attachments/20170329/e6310ce5/attachment.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image002.png
Type: image/png
Size: 942 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/users/attachments/20170329/e6310ce5/attachment-0001.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 4D2FC812-5A5D-4288-94CB-5FFF2DF3AA6D[2].png
Type: image/png
Size: 5882 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/users/attachments/20170329/e6310ce5/attachment-0002.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image004.png
Type: image/png
Size: 1451 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/users/attachments/20170329/e6310ce5/attachment-0003.png>

------------------------------

Subject: Digest Footer

--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net

------------------------------

End of users Digest, Vol 69, Issue 150
**************************************