Help setting up Shib's 3.4.3 Built-in CAS Server for Banner Apps

[Mathis, Bradley]

Hi Melvin,    I responded earlier but perhaps you didn't get the email.
I'm running banner9 apps in a couple of test environments with idp 3.x and
would be happy to try and help.  You can contact me directly via email or
phone ....that way we could get as "Bannery" as needed .... with the little
bit of information you have given already I see a couple things that could
be setup incorrectly.  I'm not a shibboleth expert or developer as many
here are ... but I am knowledgeable about Banner9 configurations and I do
have it working (albeit mine in setup for DUO/MFA).  Anyway just offering
since I'm familiar what you are trying to do.

Thanks!

Brad Mathis
Principal Systems Analyst
Pima Community College
IT - Technical Services
520.206.4826
bmathis at pima.edu









On Thu, Feb 14, 2019 at 12:09 PM Melvin Lasky <melvin.lasky at manhattan.edu>
wrote:

> Hey guys,
> Thanks for all the responses!
>
> I put the LDAP Debug in, and I do see my employeeNumber in my logs.
>
> I changed my App to look for employeeNumber instead of UDC_IDENTIFIER to
> make it slightly easier. I also changed my attribute-filter.xml to look for
> one thing.
>
> Still no dice.
>
> <AttributeFilterPolicy id="releaseForBannerApps" >
>   <PolicyRequirementRule xsi:type="Requester" value="
> https://specific_banner_app_server.manhattan.edu" />
>         <AttributeRule attributeID="eduPersonScopedAffiliation"
> permitAny="true" />
>         <AttributeRule attributeID="employeeType" permitAny="true" />
>         <AttributeRule attributeID="surname" permitAny="true" />
>         <AttributeRule attributeID="givenName" permitAny="true" />
>         <AttributeRule attributeID="mail" permitAny="true" />
>         <AttributeRule attributeID="employeeNumber" permitAny="true" />
>         <AttributeRule attributeID="UDC_IDENTIFIER" permitAny="true" />
> </AttributeFilterPolicy>
>
> ——
>
> Still nothing.
>
> Any suggestions would  be amazing.
>
> Thanks
>
> *Melvin Lasky*
> *Associate Director of Enterprise Architecture*
>
>
>
>
> Riverdale, NY 10471
> Phone: 718-862-7410
> melvin.lasky at manhattan.edu
> www.manhattan.edu
> --
> For Consortium Member technical support, see
> https://wiki.shibboleth.net/confluence/x/coFAAg
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20190214/e5a0fa2e/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: email_logo.jpg
Type: image/jpeg
Size: 7478 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/users/attachments/20190214/e5a0fa2e/attachment.jpg>