[External] Re: Cornerstone On Demand + SSO + custom attribute for user matching

[Cantor, Scott]

On 6/15/20, 5:13 PM, "users on behalf of Shweta Kautia" <users-bounces at shibboleth.net on behalf of skautia at northcarolina.edu> wrote:

> We're being informed now, that NameID is the only way supported to send in a user matching value. 

"We refuse to" is not the same as "we can't", and I bully vendors into lots of things that they still claim they "don't support". Even so, I wouldn't exactly sweat it. Arguing with them about it takes more time than just doing it.

I don't usually spend much time on that question, so I doubt I would have been that vocal about it, suggesting that at the time it was a standard option. I would have probably had to argue about not using email address, but I imagine that's more normal now.

> Is it possible for you to confirm if that integration was in fact with an attribute (or a custom attribute) or just setting the
> NameID to an email or user id to match in their data?

We use an Attribute.

> I don't know if the product versions on their end have anything to do with their SSO model. 

Very much doubt it.

-- Scott