Help setting up Shib's 3.4.3 Built-in CAS Server for Banner Apps

[IAM David Bantz]

Bradley, I and I suspect many others would appreciate details of your
config on both the Banner and Sibb side.

David Bantz
U Alaska

On Thu, Feb 14, 2019 at 12:34 PM Mathis, Bradley <bmathis at pima.edu> wrote:

> Hi Melvin,    I responded earlier but perhaps you didn't get the email.
> I'm running banner9 apps in a couple of test environments with idp 3.x and
> would be happy to try and help.  You can contact me directly via email or
> phone ....that way we could get as "Bannery" as needed .... with the little
> bit of information you have given already I see a couple things that could
> be setup incorrectly.  I'm not a shibboleth expert or developer as many
> here are ... but I am knowledgeable about Banner9 configurations and I do
> have it working (albeit mine in setup for DUO/MFA).  Anyway just offering
> since I'm familiar what you are trying to do.
>
> Thanks!
>
> Brad Mathis
> Principal Systems Analyst
> Pima Community College
> IT - Technical Services
> 520.206.4826
> bmathis at pima.edu
>
>
>
>
>
>
>
>
>
> On Thu, Feb 14, 2019 at 12:09 PM Melvin Lasky <melvin.lasky at manhattan.edu>
> wrote:
>
>> Hey guys,
>> Thanks for all the responses!
>>
>> I put the LDAP Debug in, and I do see my employeeNumber in my logs.
>>
>> I changed my App to look for employeeNumber instead of UDC_IDENTIFIER to
>> make it slightly easier. I also changed my attribute-filter.xml to look for
>> one thing.
>>
>> Still no dice.
>>
>> <AttributeFilterPolicy id="releaseForBannerApps" >
>>   <PolicyRequirementRule xsi:type="Requester" value="
>> https://specific_banner_app_server.manhattan.edu" />
>>         <AttributeRule attributeID="eduPersonScopedAffiliation"
>> permitAny="true" />
>>         <AttributeRule attributeID="employeeType" permitAny="true" />
>>         <AttributeRule attributeID="surname" permitAny="true" />
>>         <AttributeRule attributeID="givenName" permitAny="true" />
>>         <AttributeRule attributeID="mail" permitAny="true" />
>>         <AttributeRule attributeID="employeeNumber" permitAny="true" />
>>         <AttributeRule attributeID="UDC_IDENTIFIER" permitAny="true" />
>> </AttributeFilterPolicy>
>>
>> ——
>>
>> Still nothing.
>>
>> Any suggestions would  be amazing.
>>
>> Thanks
>>
>> *Melvin Lasky*
>> *Associate Director of Enterprise Architecture*
>>
>>
>>
>>
>> Riverdale, NY 10471
>> Phone: 718-862-7410
>> melvin.lasky at manhattan.edu
>> www.manhattan.edu
>> --
>> For Consortium Member technical support, see
>> https://wiki.shibboleth.net/confluence/x/coFAAg
>> To unsubscribe from this list send an email to
>> users-unsubscribe at shibboleth.net
>
> --
> For Consortium Member technical support, see
> https://wiki.shibboleth.net/confluence/x/coFAAg
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20190214/9a261a38/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: email_logo.jpg
Type: image/jpeg
Size: 7478 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/users/attachments/20190214/9a261a38/attachment.jpg>