Trying to setup Shibboleth for Google Apps for Education

[Melvin Lasky]

Hey everyone,
	I’m trying to set up my Shibboleth server to authenticate to Google Apps for Education. I’m not having much luck. Any help will be greatly appreciated.

I’ve modified the following…..

relying-party.xml

    <util:list id="shibboleth.RelyingPartyOverrides">
        <bean parent="RelyingPartyByName" c:relyingPartyIds="google.com/a/gtest.manhattan.edu">
           <property name="profileConfigurations">
               <list>
                   <bean parent="SAML2.SSO" p:nameIDFormatPrecedence="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified" p:encryptAssertions="false" /> 
               </list>
           </property>
        </bean>            
    </util:list>

</beans>

saml-nameid.xml 

    <!-- SAML 2 NameID Generation -->
    <util:list id="shibboleth.SAML2NameIDGenerators">
    
        <ref bean="shibboleth.SAML2TransientGenerator" />
        <bean parent="shibboleth.SAML2AttributeSourcedGenerator"
           p:format="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified"
           p:attributeSourceIds="#{ {'Gprincipal'} }" />                 
    </util:list>


attribute-resolver.xml

    <AttributeDefinition xsi:type="Simple" id="Gprincipal">
        <InputDataConnector ref="myLDAP" attributeNames="uid"/>
        <Template>
           <![CDATA[
             ${uid}@gtest.manhattan.edu
           ]]>
        </Template>
    </AttributeDefinition>

attribute-filter.xml

<AttributeFilterPolicy id="releaseForGoogleApps" >
  <PolicyRequirementRule xsi:type="Requester" value="google.com/a/gtest.manhattan.edu" />
     AttributeRule attributeID="Gprincipal" permitAny="true" />
</AttributeFilterPolicy>  

———

And then in Google I have:

Sign In URL: https://shibserver.manhattan.edu/idp/profile/SAML2/Redirect/SSO <https://shibserver.manhattan.edu/idp/profile/SAML2/Redirect/SSO>

Sign Out: https://shibserver.manhattan.edu/idp/profile/SAML2/Redirect/SSO <https://shibserver.manhattan.edu/idp/profile/SAML2/Redirect/SSO>

——

I got this error message when I tried to log in. Any suggestions will be greatly appreciated.

HTTP Status 404 – Not Found

Type Status Report

Message /idp/profile/SAML2/Redirect/SSO

Description The origin server did not find a current representation for the target resource or is not willing to disclose that one exists.

Apache Tomcat/9.0.14



Melvin Lasky
Associate Director of Enterprise Architecture





Riverdale, NY 10471
Phone: 718-862-7410
melvin.lasky at manhattan.edu <mailto:melvin.lasky at manhattan.edu>
www.manhattan.edu <http://www.manhattan.edu/>




-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20190325/a6aa53a8/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: email_logo.jpg
Type: image/jpeg
Size: 7478 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/users/attachments/20190325/a6aa53a8/attachment.jpg>